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The  general  approach  to  probabilistic  structural  design  is  applied  to  the 
particular  case  of  hardened  ground  facilities.  The  basic  probabilistic 
concepts  required  for  design  are  presented  and  illustrated  by  application 
of  the  methodology  to  the  design  of  a composite  steel /concrete  liner  for 
a deep-buried  tunnel.  An  evaluation  of  the  advantages  and  disadvantages  of 
the  probabilistic  approach  compared  to  the  deterministic  approach  is  made. 
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SUMMARY 


The  general  approach  to  probabilistic  structural  design  is 
applied  to  the  particular  case  of  hardened  ground  facilities.  The 
basic  probabilistic  concepts  required  for  design  are  presented  and 
illustrated  by  application  of  the  methodology  to  a composite  steel/ 
concrete  liner  for  a deep-buried  tunnel.  An  evaluation  of  the  advantages 
and  disadvantages  of  the  probabilistic  structural  design  approach 
compared  to  the  deterministic  design  approach  is  made.  For  the  example 
design,  the  allowable  strength  of  the  steel /concrete  rock  cavity  lining 
is  determined  by  Newmark's  method  which  relates  the  free-field  compressive 
stress  to  the  various  stresses  and  strains  in  the  steel,  concrete  and 
rock.  Multiple  failure  modes  of  the  tunnel  liner  are  accounted  for 
when  the  applied  loads  result  from  a single  source  such  as  a nuclear 
burst. 


Basic  concepts  of  Bayesian  statistical  decision  theory  are 
presented  along  with  two  practical  examples.  One  example  illustrates  a 
method  for  rationally  selecting  an  acceptable  failure  probability  for 
hardened  facilities.  The  second  example  illustrates  the  application  of 
statistical  decision  theory  to  the  selection  of  the  optimum  test  program 
for  a deep-buried  rock/liner  structural  system. 


Recommendations  are  made  for  future  research  in  the  develop- 
ment of  probabilistic  design  methodology  in  areas  relating  specifically 
to  the  design  of  deep-buried  lined  tunnels  and  which  also  have  general 
applicability  to  other  types  of  hardened  facilities. 
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Table  1-  Conversion  factors  for  U.S.  customary  to  metric 
(SI)  units  of  measurement. 


To  convert  from 

mils 

inches 

feet 

miles 

square  Inches 
square  feet 
square  miles 
cubic  inches 
cubic  feet 
cubic  yards 
gallons  (U.S.) 
gallons  (Imperial) 
ounces 
pounds 

tons  (short) 
tons  (long) 
pounds  per  foot 
pounds  per  square  inch 

pounds  per  cubic  inch 

pounds  per  square  foot 

pounds  per  cubic  foot 

inches  per  second 

inch-pounds 

inch-kips 

Fahrenheit  degrees 
kilotons 


mill imeters 

centimeters 

meters 

kilometers 

square  centimeters 

square  meters 

square  meters 

cubic  centimeters 

cubic  meters 

cubic  meters 

1 i ters 

liters 

grams 

kilograms 

kilograms 

kilograms 

newtons  per  meter 

newtons  per  square 
centimeter 

kilograms  per  cubic 
centimeter 

newtons  per  square 
meter 

kilograms  per  cubic 
meter 

centimeters  per  second 

meter-newtons 

meter- k i 1 onewtons 

Celsius  degrees  or 
Kelvins9 

tera joules 


Multiply  by 

0.0254 

2.54 

0.3048 

1.6093 

6.4516 

0.0929 

2,589,998.0 

16.38706 

0.0283 

0.764555 

3.785 

4.542 

28.349 

0.454 

907.185 
1,016.047 

14.59390 

0.6894757 

27,679.90 

47.88026 

16.0185 
2.54 

0.1129848 

0.0001129848 
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4.183 
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To  obtain  Celsius  (C)  temperature  readings  from  Fahrenheit  in 

rjThffi  aarsTriX. 


jt 


TABLE  OF  CONTENTS 


Section 


INTRODUCTION 
METHODOLOGY  DEVELOPMENT 

2.  Probabilistic  Structural  Design  Approach 

3.  Bayesian  Statistical  Decision  Theory 

4.  Selection  of  Failure  Probability 

5.  Probabilistic  Design  Requirements 
STRUCTURAL  DESIGN  APPLICATION 

6.  General 

7.  Description  of  Example  Hardened  Facility 
Element 

8.  Deterministic  Design  Approach 

9.  Data  Base 

9.1  Applied  Load  Data 

9.2  Geometrical  and  Material  Property 
Data 

9.3  Failure  Strain  Data 

9.4  Cost  Data 

10.  Deterministic  Design  Studies 

11.  Probabilistic  Design  Studies 

12.  Evaluation  of  Probabilistic  Structural 
Design  Approach 

STRUCTURAL  TESTING  APPROACH 

13.  Test  Philosophies  and  Techniques 

14.  Application  to  Example  Hardened  Facility 
Element 

CONCLUSIONS 

RECOMMENDATIONS 

REFERENCES 

SELECTED  BIBLIOGRAPHY 


TABLE  OF  CONTENTS 


Appendi x 

A DESIGN  EQUATIONS  BASED  ON  NEWARK'S  METHOD 

B COMPUTER  PROGRAM  FOR  RELIABILITY  OF  DEEP- 

BURIED  LINED  TUNNEL 


Page 

97 


105 


4 


Figure 

1 

| 2 

3 

4 

LIST  OF  ILLUSTRATIONS 

Graphical  representation  of  factor  of  safety 

Factor  of  safety  (FS)  vs.  probability  of 
failure  (Pp) 

Decision  tree:  choice  between  designs  and 

test  program 

Decision  tree  using  certainty  equivalents  for 

unknown  costs 

5 

Cost  penalty  for  underdesign  or  overdesign 

6 

Deep-buried  hardened  facility  example 

7 

Design  variables  for  Newmark's  method 

8 

Concrete  strength 

9 

Strength  of  wet  tuff 

10 

Strength  of  granodiorite 

' n 

Assembly  failure  probability  for  deep-buried  tunnel 

12 

Probability  of  failure  vs.  depch  of  burial 

j 13 

Cost  vs.  probability  of  failure 

14 

Economy  of  tunnel  lining  vs.  length 

> 15 

Truncated  decision  tree  for  selection  of  test 

■ 

program 

I 

4 

5 

1 

LIST  OF  TABLES 


Conversion  factors  for  U.S.  customary  to  metric 
(SI)  units  of  measurement 
Example  description  of  options 
Example  description  of  probabilities 
Geometrical  and  material  property  data 
Deterministic  design  summary 


SECTION  I 
INTRODUCTION 


The  use  of  probabilistic  concepts  in  the  structural 
design  and  testing  of  hardened  facilities  offers  four  significant 
benefits.  First,  it  provides  a framework  in  which  inherently  random 
quantities  may  be  so  considered,  thus  increasing  the  fidelity  for 
analytical  idealizations  of  loads  and  strengths.  Second.it  enables  the 
various  realistic  estimates  of  uncertainties  to  be  combined  in  a 
rational  and  consistent  manner,  thus  producing  meaningful  estimates 
of  the  probability  of  structural  failure.  Third,  it  thereby  permits  a 
structural  design  with  an  explicit  and  reasonable  balance  between 
reliability  and  cost.  Alternative  deterministic  procedures  produce 
designs  whose  safety  is  neither  balanced  nor  clearly  specified 
(Reference  1).  Several  additional  benefits  of  a probabilistic 
structural  design  approach  relative  to  the  conventional  deterministic 
approach  are  discussed  by  Moses  (Reference  2,  page  84).  For  example, 
where  the  applied  loading  environment  encompasses  a broad  spectrum, 
selecting  the  worst  possible  loading  condition  is  “economically 
meaningless."  A fourth  factor  is  the  necessity  in  design  trade 
studies  to  compare  optimized  structures  having  different  configura- 
tion and  material.  For  this  situation,  a rational  comparison  is 
possible  only  if  all  the  optimized  structures  have  the  same  probabi- 
lity of  failure.  Some  of  these  benefits  will  be  demonstrated  in 
the  present  report  through  a comparison  of  deterministic  and  proba- 
bilistic design  approaches  in  a practical  design  example. 


Basic  probabilistic  concepts  required  for  the  design 
example  are  presented  in  Section  II.  The  hardened  facility  element 
used  for  the  illustrative  example  is  a composite  steel /concrete 
liner  for  a deep-buried  tunnel.  The  design  data  base  available  for 
this  example  is  presented  in  Section  III  along  with  both  determinis 
tic  and  probabilistic  design  studies.  Since  the  data  and  design 
quantities  are  given  neither  in  consistent  metric  units  nor  in  U.S. 


customary  units,  conversion  factors  for  U.S.  customary  to  metric 
(SI)  units  of  measurement  are  listed  in  Table  1.  An  approach  to  the 
use  of  probabilistic  concepts  in  the  structural  testing  of  hardened 
facilities  is  included  in  Section  IV.  Conclusions  of  the  present 
study  and  recommendations  for  future  research  activities  are  presented, 
respectively,  in  Sections  V and  VI.  References  used  specifically  in 
the  present  study  and  a selected  bibliography  which  may  be  helpful 
in  future  studies  are  presented,  respectively,  in  Sections  VII  and 
VIII.  Details  of  the  design  equations  and  a computer  implementation 
of  the  probabilistic  design  approach  are  included  in  the  Appendix. 
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SECTION  II 

METHODOLOGY  DEVELOPMENT 

1.  GENERAL 

The  four  subjects  in  Section  II  concern  several  different 
methodologies  associated  with  the  design  and  test  of  hardened 
facilities.  Paragraph  2 presents  a brief  general  summary  of  proba- 
bilistic structural  design  criteria  for  both  single  components  and 
assemblies  consisting  of  several  components.  Detailed  equations  are 
presented  for  the  survivability  of  an  assembly  having  linearly 
dependent  lognormal  loads  and  independent  lognormal  strengths.  A 
detailed  discussion  of  the  Taylor's  series  method  for  approximating 
the  probability  distribution  of  a nonlinear  function  of  several 
independent  random  variables  is  also  presented.  The  central  limit 
theorem  is  discussed  as  a basis  for  using  the  lognormal  probability 
law  to  represent  the  probability  distributions  of  many  analytical 
functions. 


Paragraph  3 presents,  as  background  material,  a brief 
summary  of  the  basic  concepts  of  Bayesian  statistical  decision 
theory.  An  example  of  the  application  of  decision  theory  involving 
choices  between  alternative  systems  and  between  alternative  testing 
programs  is  also  included.  Paragraph  4 comprises  a more  detailed 
application  of  decision  theory  leading  to  the  rational  selection  of 
failure  probability  comprising  a balance  between  risk  and  cost.  The 
use  of  utility  theory  to  establish  required  "failure  cost"  data  is 
discussed  for  a general  hardened  facility  where  significant  monetary 
and  nonmonetary  consequences  of  failure  exist.  Paragraph  5 briefly 
illustrates  a procedure  for  specifying  design  requirements  consistent 
with  a probabilistic  structural  design  approach.  This  illustration 
is  concerned  specifically  with  a deep-buried  hardened  facility. 


2.  PROBABILISTIC  STRUCTURAL  DESIGN  APPROACH 

Fundamental  concepts  associated  with  probabilistic  struc- 
tural design  are  presented  by  Freudenthal  in  Reference  1.  The 
probabilistic  design  approach  proposed  in  Reference  1 is  based  on  a 
recognition  of  the  stochastic  characteristics  of  both  limit  loads 
and  strengths.  The  approach  subsequently  proposed  by  Ang  and  Amin 
(Reference  3)  recognizes,  in  addition,  the  analytical  uncertainties 
involved  in  evaluating  these  probabilistic  loads  and  strengths. 

These  uncertainties  in  analytically  determining  limit  loads  and 
strengths  can  be  quantified  by  a constant  coefficient  of  uncertainty 
(u)  equal  to  or  greater  than  unity.  Thus  the  event  (S/L  > u) 
constitutes  a state  of  structural  safety,  where  S and  L represent 
the  strength  and  limit  load  associated  with  a structural  component. 

If  S and  L are  both  random  variables,  then  the  probability  P[S/L  > u] 
is  a proper  measure  of  structural  safety.  The  extended  reliability 
structural  design  approach  is  then  expressed  by  the  following 
probabilistic  equation  for  structural  safety: 


where 


p[f*  u]  = 1-Pf 


(1) 


is  the  random  variable  describing  the  component 
strength, 

is  the  random  variable  describing  the  component 
limit  load, 

is  the  coefficient  of  uncertainty  for  the  component, 
and 

is  the  component  probability  of  failure  or 
acceptable  risk. 


When  the  limit-load  and  strength  probability  density 
functions  are  known,  the  structural  design  approach  may  be  expressed 
in  two  equivalent  forms: 


(2) 


where 


fm  r± 

9s  * / J fL(x)  - fs  (y)  dx  dy 

*-cc 


fs  (y)  * fL  (*)  «•* 


(3) 


P<.  = 1 - Pp  is  the  structural  reliability, 

fL  (x)  is  the  limit-load  probability  density  function 
(PDF),  and 

f$  (y)  is  the  strength  PDF. 

The  conventional  factor  of  safety  is  defined  as  the  ratio 
of  the  allowable  strength  (S^)  to  the  design  limit  load  (l_D): 


FS 


(4) 


where 

is  the  value  of  the  random  strength  corresponding 
to  a specified  exceedance  probability  (P A),  and 
LD  is  the  value  of  the  random  limit  load  corresponding 
to  a specified  non-exceedance  probability  (PD). 

The  purpose  of  the  factor  of  safety  in  the  structural 
design  procedure  is  to  locate  the  strength  PDF  relative  to  the 
given  limit-load  PDF  so  that  Equation  (2)  or  (3)  results  in  the 
required  component  reliability.  This  concept  is  illustrated  in 
Figure  1.  For  most  probability  distributions,  the  integral  of 
Equation  (2)  or  (3)  must  be  evaluated  numerically  and  the  required 
factor  of  safety  determined  by  trial-and-error  procedures.  However, 
for  certain  specific  distributions,  closed-form  evaluations  leading 
to  convenient  design  formulas  are  possible.  A particularly  conven- 
ient design  factor-of-safety  equation  occurs  when  both  limit  loads 





and  strengths  are  assumed  to  follow  the  lognormal  probability  law 


nonexceedance 


The  component  factor-of-safety  expression  for  lognormal 
limit  loads  and  strengths  is  derived  in  Reference  4 in  the  following 
form: 


where 


is  the  coefficient  of  uncertainty, 
is  the  probability  of  failure  or  acceptable  risk, 
is  the  non-exceedance  probability  for  design  limit 
load  (Ld), 

is  the  exceedance  probability  for  allowable  strength 


and  V(.  are  limit-load  and  strength  coefficients 
of  variation,  and 

(P)  is  the  inverse  of  the  standardized  normal 
cumulative  distribution  function  given  by 


The  numerical  behavior  of  the  lognormal /lognormal  factor 
of  safety  is  shown  graphically  in  Figure  2.  For  this  plot,  the 
defining  probabilities  for  design  limit  load  and  allowable  strength 
are  both  taken  as  99  percent,  and  the  coefficient  of  uncertainty  is 
taken  as  unity.  The  factor  of  safety  is  seen  to  increase  monotoni- 
cally  with  decreasing  probability  of  failure  for  given  load  and 
strength  coefficients  of  variation. 
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From  Equation  (5),  the  component  factor  of  safety  corres- 
ponding to  a specified  reliability  may  be  computed.  The  allowable 
strength  is  then  determined,  from  Equation  (4),  as  the  product  of< 
the  factor  of  safety  times  the  design  limit  load.  This  approach  is 
valid  for  an  individual  structure  having  a single  failure  mode 
wiiere  both  the  load  and  the  strength  follow  the  lognormal  probability 
law. 

A structure  having  multiple  failure  modes  is  termed  an 
assembly.  This  basic  design  approach  is  also  valid  for  individual 
components  comprising  an  assembly  when  the  component  reliabilities 
are  specified  in  terms  of  the  assembly  reliability  and  when  the 
failure  of  a single  component  constitutes  failure  of  the  assembly 
(Reference  2,  page  91).  If  all  of  the  n component  failure  modes 
are  statistically  independent, 

pf.*  ' -.V'-fn)  “ E pn  <7> 

i-1 

where 

Ppa  is  the  probability  of  failure  for  the  assembly, 
and 

Ppi  is  the  probability  of  failure  for  the  ith 
component. 

If  either  the  component  loads  or  the  component  strengths  are  corre- 
lated, the  reliability  of  the  structural  design  based  on  the  approach 
of  Equations  (4)  through  (7)  will  be  somewhat  in  error. 

If  the  failure  of  a single  component  constitutes  failure 
of  the  assembly,  the  assembly  reliability  is  defined  in  terms  of 
the  simultaneous  survival  of  each  component.  This  "weakest-1 ink" 
failure  criterion  appears  adequate  to  describe  the  failure  condition 
for  a statically  determinate  structure  and  some  evidence  suggests 
its  validity  for  statically  indeterminate  structures  as  well  (Refer- 
ence 5).  Thus,  for  an  assembly  consisting  of  n components  having 


mutually  correlated  lognormal  loads  and  strengths,  the  event  (S-^ >u-^ » 
S2>U2L2’  •••»  Sn>unLn)  constitutes  a state  of  structural  safety. 

The  reliability  of  the  assembly  is  the  probability  of  this  event 
expressed  in  terms  of  the  joint  load  and  strength  probability 
density  functions  in  an  analogous  manner  to  Equation  (2). 

An  important  special  type  of  assembly  is  one  with  all 
component  loads  linearly  related  and  with  all  component  strengths 
statistically  independent.  For  this  case,  all  the  loads  may  be 
expressed  in  terms  of  a single  variable  and  the  general  lognormal/ 
lognormal  reliability  integral  is  greatly  simplified.  The  resulting 
reliability  integral,  derived  in  Reference  4 and  presented  in 
Reference  2 (p.  90),  is 

Ps  * J— i f exp  (-»s  t 2)  • Gs  (t)  dt 

V7  (8) 

where  Gs  (t)  * 


The  functions  F(t^)  represent  cumulative  probabilities  of  the 
standardized  normal  variate  defined  by  Equation  (6)  and  tabulated, 
for  example,  in  Reference  6.  The  mean  and  standard  deviation  (v 
and  a)  of  the  transformed  normal  component  limit  loads  and  strengths 
are  obtained  from  the  actual  lognormal  mean  and  coefficient  of 
variation  (m  and  V)  as  follows: 


(9) 
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(10) 


Vtn  (T+V;2)1 


(12) 
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The  approach  of  Equations  (8)  through  (12)  clearly  requires  iteration 
since  trial  values  of  the  component  load  and  strength  parameters 
are  necessary  for  the  numerical  evaluation  of  the  reliability 
integral.  Therefore,  where  the  underlying  assumptions  are  justified, 
this  design  approach  is  suited  for  optimization  techniques  (Reference  7) 

The  design  approaches  for  independent  components  (Equa- 
tions 4 through  7)  and  for  assemblies  with  linearly  dependent  loads 
and  independent  strengths  (Equations  8 through  12)  require  analytical 
relationships  between  load  and  strength  since  both  load  and  strength 
must  be  expressed  in  directly  comparable  quantities.  This  often 
involves  determining  the  probability  distribution  of  a complicated 
nonlinear  function  of  several  random  variables.  A completely 
general  method  for  obtaining  the  desired  distribution  is  a numerical 
simulation  of  the  function  based  on  random  sampling  from  the  known 
or  assumed  probability  distributions  of  the  individual  random 
variables.  This  method,  known  as  the  Monte  Carlo  method,  was  used 
as  the  basis  for  the  probabilistic  design  studies  of  deep-buried 
hardened  facilities  described  in  Reference  8.  For  most  practical 
applications,  the  Monte  Carlo  method  is  used  to  evaluate  parameters 
of  certain  analytical  distributions  having  theoretical  justification. 

For  example,  the  distribution  of  the  largest  value  among  n indepen- 
dent observations  tends  toward  the  extremal  type  I distribution 
(Reference  9,  page  166)  as  n becomes  large.  A Monte  Carlo  study 
would  be  used  merely  to  estimate  the  mean  and  standard  deviation 
for  the  theoretical  extremal  distribution.  Since  the  results  of 
such  a Monte  Carlo  analysis  are  treated  statistically  as  measured 
data,  the  sampling  variances  of  the  parameters  of  interest  decrease 
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as  the  number  of  replications  increases.  Standard  statistical 
techniques  provide  measures  of  the  accuracy  of  the  estimates  in 
terms  of  the  number  of  replications.  In  addition.  Reference  10 
presents  several  practical  techniques  for  reducing  the  sampling 
variance  in  Monte  Carlo  simulations. 


While  the  Monte  Carlo  method  is  a powerful  and  general 
tool  for  obtaining  the  probability  distribution  of  a complicated 
function,  other  less  general  methods  may  be  preferable,  where 
applicable,  in  preliminary  design  studies  and  in  situations  where 
precise  and  costly  analyses  are  not  warranted.  One  such  approximate 
method,  based  on  the  use  of  Taylor's  series,  determines  the  distri- 
bution of  a nonlinear  function  of  several  random  variables  by 
approximating  the  desired  function  as  a linear  function  in  the 
region  of  interest.  A brief  derivation  of  this  method  follows. 


The  mean  and  standard  deviation  of  a linear  function  of 
several  independent  random  variables  are  known  from  elementary 
probability  theory  (Reference  11,  page  48).  If  Xj , X2,  . . . , Xn  are 
independent  random  variables  having  means  m, , m~,  ....  m and  variances 
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s1  , s2  , ....  sn  , respectively,  and  if  a^,  a2>  ....  an  are  constants, 
then  a linear  random  function  may  be  defined  as  follows: 


The  mean  of  f is 


Thus  the  mean  of  a linear  combination  of  random  variables 
is  equal  to  the  linear  combination  of  the  means.  This  result  is 
valid  ever  if  the  X's  are  dependent. 


The  variance  of  f is 


c 2 _ 2 _ 2 A 2 c 2 . 

Sf  * a,  S,  + a2  S2  + 


2 c 2 

• + °n  Sn 


(15) 


Thus  the  variance  of  a linear  combination  of  independent 
random  variables  is  equal  to  the  sum  of  the  products  of  variances 
and  squared  constants. 

A nonlinear  function  may  be  expanded  in  a Taylor's  series 
about  any  given  point  as  follows  (Reference  11,  page  62): 


f(X,,  X«,  .../  Xn)  = f{m|  , mj  / . nin)  ♦ 53(Xj  - m;)  P; 

i=l,n 


where  p.  = ~^7~  I _ _ 

i oX.lfTij  / 


(16) 


If  the  higher  order  terms  are  negligible,  the  mean  of  f 
is,  according  to  Equation  (14),  approximately  equal  to: 


f ( m j f (n2,  nin  ) 


(17) 


If  in  addition  the  X's  are  independent,  the  variance  of 
f is,  according  to  Equation  (15),  approximately  equal  to 


c 2 ~ c 2 
Sf  ~ 5, 


+ Sr 
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The  two  fundamental  assumptions  in  the  use  of  the  Taylor's 
series  method  are 

(1)  that  the  higher-order  terms  in  the  Taylor  expansion 
are  negligible  compared  with  the  first-order  terms, 
and 

(2)  that  the  X's  are  independent. 

The  approximations  involved  in  the  Taylor's  series  method 
may  be  evaluated  for  a special  case.  Let  the  function  of  interest 
be  a product  of  lognormal  variates  raised  to  arbitrary  constant 
exponents  as  follows: 

n C; 

Y = n X,  (19) 

1*1  1 

where 

X -j  ~ LN  (m,,  V,) 

Modifying  Equation  (19)  by  the  lognormal  transformation 


where 


n 

in  Y = E Cf  In  X, 
1*1  1 1 


(20) 


in*  X ~ N (pj,0;) 

The  relationships  between  the  transformed  normal  parameters 
(w  and  a)  and  the  lognormal  parameters  (m  and  V)  are  given  in 
Equations  (11)  and  (12).  Since  Equation  (20)  is  now  expressed  in 
terms  of  normal  random  variables  like  Equation  (13),  the  transformed 
mean  (yy)  and  standard  deviation  (ay)  may  be  obtained  from  Equations  (14) 


and  (15).  Performing  the  inverse  logarithmic  transformation  implicit 
in  Equations  (11)  and  (12)  results  in  the  following  exact  expressions 
involving  the  mean  (my)  and  coefficient  of  variation  (Vy)  of  the 
basic  function: 


Approximate  relations  for  the  mean  and  coefficient  of 
variation  of  the  product  of  independent  lognormal  random  variables 
obtained  from  the  Taylor's  series  method  of  Equations  (17)  and  (18) 
are  as  follows: 


The  Taylor's  series  method  provides  a good  approximation 
to  the  exact  parameters  when  the  are  close  to  unity  and  the 
are  small. 


A useful  property  of  the  lognormal  distribution  is  the 
multiplicative  reproductive  property:  If  and  X,,  are  independent 
lognormal  variates,  then  the  product  X-j.X^  is  also  a lognormal 
variate.  This  result  corresponds  directly  to  the  additive  reproduc 
tive  property  of  the  normal  distribution. 


m 


Perhaps  the  primary  reason  for  the  practical  importance 
of  the  normal  and  lognormal  distribution  is  the  central  limit 
theorem  (Reference  12,  p.  14).  Just  as  sums  of  independent,  arbi- 
trarily distributed  random  variables  tend  to  be  normally  distributed, 
so  do  products  of  independent,  arbitrarily  distributed  random 
variables  tend  to  be  lognormally  distributed.  More  specifically, 
let  be  a vector  of  independent,  positive  random  variables  of  an 
unspecified  distribution  such  that  the  following  mean  or  expected 
values  exist  for  every  random  variable. 


Then  if 


E S xj  I •i'j 
E{<«»  VU**}  -0/ 

E{I»"V  •ul'H/ 


(25) 

(26) 

(27) 

(28) 

(29) 

(30) 
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the  product  .R,  X.  is  asymptotatically  lognormally  distributed  with 
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transformed  normal  mean  p and  transformed  normal  variance  a provided 

n n 


that  the  ratio  «n/on  approaches  zero  with  increasing  n.  The  actual 


lognormal  mean  and  coefficient  of  variation  are  obtained  from  these 
transformed  normal  parameters  by  inverting  Equations  (11)  and  (12)  as 
before.  The  convergence  to  the  lognormal  distribution  is  especially 
rapid,  of  course,  if  the  individual  variates  have  distributions  similar 
to  the  lognormal  distribution.  Of  particular  interest  in  this  regard, 
the  normal  distribution  is  essentially  identical  to  the  lognormal 
distribution  when  the  coefficient  of  variation  is  small. 


The  probabilistic  concepts  discussed  in  this  paragraph  are 
the  basis  for  the  probabilistic  design  procedure  described  in  paragraph 
11.  The  structural  reliability  equations  for  components  and  assemblies 
(Equations  1 through  12)  are  used  to  determine  the  failure  probability 
of  a deep-buried  facility.  The  parameters  for  the  random  allowable 
strengths  of  the  facility  components  are  determined  from  analytical 
functions  of  several  random  variables  by  means  of  the  Taylor's  series 
method  (Equations  17  and  18),  The  allowable  strengths  are  assumed  to 
be  lognormally  distributed  by  virtue  of  the  central  limit  theroem 
(Equations  25  through  30).  The  Taylor's  series  method  and  the  exact 
expressions  for  products  of  lognormal  random  variables  are  also  used 
in  the  discussion  of  probabilistic  attack  conditions  (paragraph  6). 


3. 


BAYESIAN  STATISTICAL  DECISION  THEORY 


Bayesian  decision  theory  is  a formal  mathematical  procedure 
for  guiding  a decision  maker  in  the  choice  among  various  courses  of 
action  when  the  consequences  of  the  choice  are  uncertain.  The 
course  of  action  recommended  by  the  theory  is  one  which  is  consistent 
with  the  decision  maker's  preference  for  the  various  consequences 
and  with  his  judgements  of  the  uncertainties  involved. 

According  to  Raiffa  and  Schlaifer  (Reference  13),  any 
decision  problem  in  which  experimentation  is  possible  involves  the 
following  basic  data: 

1)  a listing  of  the  potential  terminal  acts  (a|  which 
are  available  to  the  decision  maker; 

2)  a listing  of  the  possible  states  of  nature  |e); 

3)  a listing  of  possible  experiments  (e|  which  may  be 
used  to  obtain  additional  information  about  the 
states  of  nature; 

4)  a listing  of  possible  outcomes  (z|  of  these  experiments; 

5)  a utility  function  which  quantifies  the  decision 
maker's  preferences  for  all  (e,z,a,8)  combinations, 
and 

6)  a listing  of  the  probabilities  associated  with  the 
various  experimental  outcomes  and  states  of  nature. 

A general  analysis  by  Bayesian  statistical  decision  theory 
permits  the  decision  maker  to  consider  each  possible  experiniental 
outcome,  to  determine  for  each  outcome  the  optimal  terminal  act,  and 
then  to  use  this  information  to  choose  an  optimal  experiment.  Some 
brief  introductions  to  the  general  topic  of  decision  theory  are 
contained  in  References  14  through  17. 


Bayesian  analysis  presumes  that  the  decision  maker  can 
assign  a utility  function  to  express  his  preferences  among  all  possible 
consequences.  As  described  by  Luce  and  Raiffa  (Reference  17),  the 
utility  function  is  used  only  to  obtain  a ranking  of  actions.  Therefore 
any  linear  transformation  of  a utility  function  is  equally  valid  since 
the  ranking  of  actions  remains  unchanged.  Values  of  the  utility 
function  may  be  expressed  either  in  units  of  dollars  gained  or  lost  or 
in  other,  more  general  units  when  dollars  do  not  reflect  true  utility. 

Bayesian  analysis  also  presumes  that  the  decision  maker  can 
assign  probabilities  to  each  of  the  possible  experimental  outcomes  and 
states  of  nature.  These  probabilities  are  based  on  whatever  evidence, 
objective  or  subjective,  is  available.  The  concept  of  subjective 
probability  reflects  a subjective  measure  of  the  degree  of  belief  the 
decision  marker  has  in  a judgement  or  prediction.  If  the  decision 
maker  has  complete  knowledge  of  an  event  so  that  he  knows  exactly  what 
will  happen,  probability  is  a meaningless  concept.  The  concept  of 
probability  is  meaningful  for  incomplete  knowledge  in  that  it  does 
represent  a numerical  summary  upon  which  the  decision  maker  is  prepared 
to  base  his  decision.  (Reference  16) 

In  statistical  decision  theory,  initial  probabilities 
assigned  to  each  possible  state  of  nature  are  termed  prior  probabili- 
ties  and  designated  P ' (9 ^ ) for  discrete  states.  If  an  experiment  (ek) 
is  performed,  the  conditional  "sampling"  probability  of  discrete 
experimental  outcome  z.  given  that  9.  is  the  true  state  of  nature  is 
designated  P(z j 1 9 - ) . The  unconditional  sampling  probability  of  z^  , 
P(Zj|ek)  is  obtained  by  averaging  the  conditional  sampling  probabilities 
using  prior  probabilities  as  follows: 


p(*j  I \)  “ ? p (*;  I 9 j / e|<)  * P'  (0O 


The  initial  probabilities  (assigned  prior  to  the  experiment) 
may  be  updated  by  means  of  Bayes'  theorem  if  additional  experimental 
evidence  is  obtained.  The  updated  probabilities  represent  the 
conditional  probability  that  9..  is  the  true  state  of  nature  given  that 
the  outcome  occurred  from  experiment  ek.  These  probabilities, 
designated  P"(e^|z.. ,e,_) , are  termed  posterior  probabilities  since  they 
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are  assigned  after  the  experiment.  The  posterior  probabilities  are 
obtained  from  Bayes'  theorem  as  follows: 

P"  (ejl  = P(zjl0i » e|<)  P'(ei)  (32) 

Several  alternate  procedures  exist  for  assigning  the 
probabilities  associated  with  experimental  outcomes  and  states  of 
nature.  For  example,  the  unconditional  sampling  probability,  P(Zj | ) , 
may  be  assigned  directly  along  with  the  conditional  state  probability, 
P(e. |z . ,ek) . Nevertheless,  the  most  common  procedure  is  the  direct 
assignment  of  P'(e)  and  P (z | e ) for  each  experiment. 

The  rule  used  to  determine  the  "optimum"  decision  which  is 
usually  adopted  and  used  here  is  to  choose  the  act  which  either 
maximizes  the  expected  gain  or  minimizes  the  expected  loss.  Given  a 
specific  experiment  (ek)  and  a specific  outcome  (zj)»  the  optimal 
terminal  act  (a*),  which  has  the  maximum  expected  gain,  is  determined 
using  posterior  probabilities  defined  by  Equation  (32). 

u (°*  | zj  , ek)  » max  £ u (ek,  zj,o,8j  ) * P“  ( ©i  | zj  ,®k)  (33) 

This  procedure  is  designated  terminal  analysis  and  is  used 
to  select  the  optimal  terminal  act  after  an  experiment  has  been 
performed.  The  selection  of  the  optimal  experiment  to  be  performed  is 
guided  by  pre-posterior  analysis.  The  expected  gain  of  an  experiment 
is  determined  by  averaging  the  optimal  terminal  act  for  each 
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experimental  outcome  using  unconditional  sampling  probabilities 
defined  by  Equation  (31).  The  optimal  experiment  (e*)  is,  as  before 
the  one  having  the  maximum  expected  gain: 


The  general  decision  problem  is  described  by  Raiffa  and 
Schlaifer  (Reference  12)  as  a game  between  the  decision  maker  and 
"chance". 


The  decision  maker  selects  an  e in  (e)  . 
Chance  selects  a z in  <z}  according  to  the 
probability  distribution  P(z|e). 

The  decision  maker  selects  an  a in  a . 
Chance  selects  a e in  (e)  according  to  the 
probability  distribution  P"(e|z,e). 

The  decision  maker  receives  u(e,  z,  a,  e). 


Payoff 


This  sequence  of  moves  may  be  represented  graphically  by  a 
decision  tree  (Figure  3)  when  each  choice  has  only  a few  options. 


To  illustrate  these  basic  concepts  of  decision  theory, 
consider  the  hypothetical  choice  between  an  existing  system  having 
known  reliability  and  a new  system  to  be  designed  to  a somewhat 
higher  reliability.  Two  different  test  programs,  one  ten  times  as 
costly  as  the  other,  are  available,  if  desired,  to  provide  additional 
evidence  concerning  the  actual  reliability  of  the  new  system.  The 
total  decision,  then,  involves  not  only  the  choice  between  systems 
but  also  the  selection  of  the  preferred  test  program. 


The  basic  listings  of  possible  acts,  states  of  nature, 
experiments  and  outcomes  are  presented  in  Table  2.  The  known  relia- 
bility of  the  existing  system  is  the  probability  of  state  occurring 
when  act  a,  is  selected.  Let  this  known  reliability  be  designated 


EXPERIMENTAL 
OUTCOME  {2} 


ACTION  {a} 


EXPERIMENT  { e } 


STATE 


Figure  3.  Decision  tree:  choice  between  designs  and  test  program 


Table  2.  Example  description  of  options. 


terminal  acts  f a-j  accept  new  system  design 

|a2  retain  existing  system  design 

states  of  nature  f 9^  system  does  not  fail  in  service 

| 02  system  fails  in  service 


experiments 


outcomes 


no  additional  testing 
inexpensive  test  program 
expensive  test  program 


dummy  outcome  of  eQ 

outcome  of  e.  more  favorable  to  0. 
' 

outcome  of  e^  more  favorable  to  0^ 
outcome  of  e2  more  favorable  to  0^ 
outcome  of  e2  more  favorable  to  02 


P * ( ©1 1 ag ) and  be  50  percent.  Since  one  of  the  two  states  must 
occur,  by  definition,  the  failure  probability  of  the  existing  system, 
P ' (e2l a2) > is  also  50  percent.  Let  the  design  reliability  for  the 
new  system,  which  is  the  prior  probability  P ' (e^ | a^ ) , be  60  percent. 
The  corresponding  prior  failure  probability,  P 1 (©2 ! a^ ) , is,  of 
course,  40  percent.  Thus  the  design  reliability  of  the  new  system 
is  somewhat  greater  than  the  known  reliability  of  the  existing 
system. 


The  three  possible  experiments  consist  of  no  testing  (eQ), 
an  inexpensive  and  relatively  ineffective  test  program  (e^),  and  an 
expensive  and  relatively  effective  test  program  (eg).  The  assumption 
is  made,  perhaps  contrary  to  fact,  that  the  test  programs  (e^  and 
eg)  provide  information  which  is  directly  related  to  the  behavior  of 
the  new  system  in  service.  Neither  of  the  test  programs  is  infallible, 
but  both  provide  useful  information.  The  fallibility  of  the  experi- 
ments is  quantified  in  the  conditional  sampling  probabilities.  For 
e-j , let  the  probability  that  the  test  outcome  favors  when  e1  is 
the  true  state  be  P(Zjj |6j  ,ej)  equal  to  70  percent.  The  probability 
of  the  experiment  e1  indicating  that  the  system  will  fail  in  service 
(9g)  when  e.j  is  the  true  state  is,  of  course,  30  percent.  Similarly, 
probabilities  are  assigned  for  both  possible  outcomes  of  e^  when  0g 
is  the  true  state.  These  probabilities  for  e-j  and  the  corresponding 
conditional  sampling  probabilities  for  eg  are  presented  in  Table  3 
along  with  the  prior  probabilities  for  both  possible  terminal  acts. 

The  assigned  prior  and  conditional  sampling  probabilities  are  used 
with  Equations  (31)  and  (32)  to  calculate  the  unconditional  sampling 
probabilities  and  posterior  probabilities  also  presented  in  Table  3. 

All  the  significant  probabilities  are  listed  on  the  decision  tree  of 
Figure  3 in  their  appropriate  locations. 

The  costs  for  this  hypothetical  decision,  are  also 
presented  in  Figure  3.  The  individual  costs  of  the  experiments 
and  the  terminal  acts  are  combined  with  the  costs  associ- 
ated with  the  states  of  nature  to  result  in  total  costs  for  all 
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Table  3.  Example  description  of  probabilities. 


Prior  Probabilities  of  State  for  Both  System  Designs 


P*  (0,1a, ) = 0.6 

P’ (e2|ai ) = M 

1.0 


P'(e1|a2)  = 0.5 

P'(e2la2)  = 0J. 

1.0 


Conditional  Sampling  Probabilities  for  New  System  Design 


P(zl = 0*7 

^(^12^1*  ®1  ^ = ^ 

1.0 


P(z21|e1,  e2)  = 0.95 
P(z22|e1 , e2)  = 0.05 
1.00 


P (z  1 1 1 ® 2 * ®1  ^ ® ^ 

P(z12|02,  e-j ) = 0J1 

1.0 


p (*2i I ®2 ’ e2^  = ^ 

pU22l02,  e2)  = 0J) 

1.0 


Unconditional  Sampling  Probabilities  for  New  System  Design 

(Equation  31) 


m* 


Table  3.  Example  description  of  probabilties.  (continued) 


Posterior  Probabilities  of  State  for  New  System  Design 

(Equation  32) 


p,,(0l  > Z1 1 *el ) = 

0.84 

P "( © -j  I z 2*j 

= 0.934 

P'l(©2^zll  * el ^ 

0.16 

P "(^l  Z21  ,e2^ 

= 0.066 

1.00 

1 .000 

P "( © 1 1 z 1 2 ,el  ^ 

= 0.36 

P "(®i 1 z22 ,e2^ 

= 0.077 

p "( ©2 1 2 *e1  ^ 

= 0.64 

1.00 

p"(e2|z22,e2) 

= 0.923 

1 .000 
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(e,  z,  a,  6)  combinations  as  shown.  The  expected  utilities  for  each 
action  are  calculated  for  all  experiments  and  experimental  outcomes, 
as  shown  in  Figure  3.  The  terminal  analysis  of  Equation  (33)  then 
permits  a selection  of  the  optimal  terminal  act  for  each  experiment 
and  outcome.  For  example,  if  no  testing  is  performed  (eQ),  the 
optimal  act  is  to  accept  the  new  system  design  (a-j ) since  its  expected 
cost  is  less  than  that  for  a0: 


Notice  that  for  e-j  and  e2,  the  optimal  act  is  clearly 
determined  by  the  test  result. 


The  expected  costs  corresponding  to  the  five  outcomes  are 
now  used  with  the  unconditional  sampling  probabilities  to  select  the 
optimal  experiment.  This  preposterior  analysis  is  accomplished  with 
Equation  (34).  The  results  favor  the  expensive  test  program  (e2)  as 
shown  in  Figure  3.  For  this  example,  the  choice  of  e2  is  preferable 
when  the  failure  cost  exceeds  200.  When  the  failure  cost  is  less 
than  200,  the  preferred  choice  is  the  inexpensive  test  program  (e^. 


4. 


SELECTION  OF  FAILURE  PROBABILITY 
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The  problem  of  determining  the  least-cost  design  with 
maximum  possible  reliability  may  be  approached  in  at  least  three 
different  ways: 

(1)  minimize  the  total  expected  cost; 

(2)  minimize  the  failure  probability  subject  to  an  allow- 
able total  cost; 

(3)  minimize  total  cost  subject  to  an  acceptable  failure 
probability. 

Since  the  determination  of  acceptable  failure  probability  for  hardened 
facilities  requires  a detailed  understanding  of  national  goals  and 
priorities  not  generally  available  to  a facility  designer,  a cognizant 
government  agency  should  be  responsible  for  this  determination.  The 
recommended  approach  for  this  agency  to  use  in  determining  the 
acceptable  failure  probability  is  the  minimum  total  expected  cost 
hypothesis  of  approach  (1).  Given  the  resulting  acceptable  failure 
probability,  the  facility  designer  may  then  minimize  total  cost  as  in 
approach  (3).  Moses  and  Kinser  (Reference  18)  demonstrate  appropriate 
optimization  techniques  in  the  analogous  problem  of  minimizing  total 
structural  weight  subject  to  an  acceptable  failure  probability. 

The  minimum  expected  cost  hypothesis  of  statistical  decision 
theory  has  been  used  by  Turkstra  (Reference  19),  Lind  and  Davenport 
(Reference  20),  Freudenthal  (Reference  1),  Shinozuka  et  al 
(Reference  21),  and  others  to  select  an  acceptable  failure  probability 
for  a structural  scheme.  A scheme  is  defined  herein  as  a set  of 
structures  which  are  essentially  identical  except  in  initial  cost  and 
failure  probability.  Therefore,  except  for  initial  cost,  all  structures 
within  a scheme  would  satisfy  the  intended  purpose  equally  well  if 
successful  and  would  lead  to  identical  results  if  unsuccessful. 
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All  structures  within  a given  scheme  also  must  have  in 
common  a single  type  of  failure,  such  as  catastrophic  failure,  even 
though  multiple  failure  modes  are  possible.  The  failure  condition 
may  be  defined  for  an  assembly  by  the  "weakest-link"  criterion;  that 
is,  failure  of  the  assembly  may  be  assumed  to  occur  when  any  of  its 
components  fails.  With  the  restriction  to  a single  type  of  failure, 
the  only  possible  states  of  nature  which  describe  the  structural 
behavior  are  success  or  failure.  The  total  expected  cost  of  the  i*^1 
alternative  structure  within  a given  scheme  is  then  the  sum  of  the 
expected  success  cost  and  the  expected  failure  cost: 

CTi  = Cjj-O-Pp,)  + (Cj,  +CF)  • PFi 

= C,j  + Cp  • PFI  (35) 


where 


Cx.  is  the  total  expected  cost  of  the  i structure. 

II  XL 

Cj.j  is  the  initial  (life-cycle)  cost  of  the  itn 
structure. 

Cc  is  the  net  failure  cost  of  the  scheme. 

• | 
PFi  is  the  acceptable  failure  probability  for  the  i 

structure. 


The  failure  probability  and  the  initial  cost  are  inversely 
proportional  and  are  related  through  the  probabilistic  structural 
design  approach.  Thus  an  increase  in  initial  cost  is  necessary  for 
a decrease  in  failure  probability.  Failure  probability  and  initial 
cost  are  related  analytically  since  both  are  dependent  on  the  design 
parameters. 

For  any  typical  hardened  facility,  the  success  cost  and 
the  net  failure  cost  may  not  be  known  with  certainty.  For  this 
situation,  Raiffa  and  Schlaifer  (Reference  13,  p.  17)  recommend  that 


the  state  space  be  expanded  to  include  uncertainty  in  cost  as  well 
as  in  structural  behavior.  Since  the  probability  measure  on  the 
cost  estimates  is  independent  of  the  structural  behavior,  the  various 
possible  discrete  costs  may  be  replaced  by  the  mean  values  of  the 
initial  and  net  failure  costs.  This  significant  simplification  is 
shown  schematically  in  the  decision  tree  of  Figure  4.  The  approxima- 
tion in  defining  the  mean  failure  cost  with  the  initial  cost  held 
constant  is  considered  acceptable  since  Cp  is  significantly  greater 
than  Cj  for  practical  structures.  Thus,  Equation  (35)  may  be  consid- 
ered valid  even  when  precise  cost  estimates  are  unavailable  so  long 
as  the  mean  values  for  the  initial  and  net  failure  costs  are  used  as 
certainty  equivalents  for  the  random  cost  estimates. 


The  failure  probability  corresponding  to  minimum  total 
expected  cost  has  been  determined  by  Lind  and  Davenport  (Reference  20) 
for  a special  case  having  wide  applicability.  For  this  case,  the 
natural  logarithm  of  the  failure  probability  is  assumed  to  be  very 
nearly  a linear  function  of  initial  cost  in  the  interesting  range  of 
high  reliability.  This  relationship  may  be  written 


(36) 


where 

Cj  is  the  (mean)  initial  cost 

c is  the  attenuation  cost  defined  as  the  slope  of 
the  initial  cost  vs.  logarithm  of  Pp,  and 
b is  a proportionality  constant. 

The  attenuation  cost  or  cost  slope  is  seen  to  be  the  cost  of  reducing 
the  failure  probability  by  a factor  of  e(%  2.718...).  Substituting 
Equation  (36)  into  Equation  (35)  and  minimizing  the  total  expected 
cost  results  in  the  following  relation  for  optimum  failure  probability: 


(37) 
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Thus,  with  the  stated  assumptions,  the  failure  probability 
which  minimizes  the  total  expected  cost  is  the  ratio  of  attenuation 
cost  to  net  failure  cost.  The  nondimensional  cost  penalty  for 
underdesigr.  or  overdesign  is  also  given  in  Reference  20  as  follows: 


y = x 


1 + e' 


where 


(•**•) 


C^-o  is  the  minimum  total  expected  cost  and 

CT  is  the  value  of  initial  cost  when  the  total 
Io 

expected  cost  is  minimized. 

This  relation  is  plotted  in  Figure  5.  For  an  underdesigned 
structure,  the  cost  penalty  is  related  to  the  higher  expected  failure 
cost.  For  an  overdesigned  structure,  the  cost  penalty  is  related  to 
the  higher  initial  cost.  As  the  initial  cost  increases,  the  cost 
penalty  becomes  a linear  function  of  initial  cost  since  the  contribu- 
tion of  the  expected  net  failure  cost  approaches  zero.  The  failure 
probability  corresponding  to  the  lowest  initial  cost  at  which  the 
expected  net  failure  cost  is  negligible  may  be  defined  as  the  effec- 
tively zero  failure  probability.  The  cost  penalty  corresponding  to 
this  condition  is  indicated  in  Figure  5. 


Figure  5 Cost  penalty  for  underdesign  or  overdesign 


A somewhat  different  definition  of  effectively  zero  failure 
probability  is  presented  by  Turkstra  (Reference  18)  for  the  case 
that  initial  costs  or  net  failure  costs  have  limited  accuracy.  When 
the  individual  cost  terms  in  Equation  (35)  are  rounded  to  an  appropri- 
ate level  of  accuracy,  the  expected  net  failure  cost  for  some  alter- 
natives can  be  rounded  to  zero.  These  alternatives,  according  to 
Turkstra's  definition,  are  said  to  have  effectively  zero  failure 
probabilities.  As  suggested  by  Figure  5,  the  least  costly  structure 
with  Turkstra's  effectively  zero  failure  probability  is  a somewhat 
conservative  design. 

According  to  Blake  (Reference  22)  a certain  degree  of 
conservatism  in  the  design  is  justifiable  to  minimize  the  consequences 
of  potential  errors.  A numerical  expression  for  a conservative, 
non-optimum  failure  probability  may  be  obtained  from  Equation  (36) 
using  the  definitions  of  Equation  (38).  If  X is  the  value  of  x in 
Figure  5 by  which  a structure  is  overdesigned,  the  corresponding 
conservative  failure  probability  is 


PFx  ~ PF0  (e  X) 


(39) 


where 

PpQ  is  the  optimum  failure  probability  defined  by 
Equation  (37). 

The  corresponding  cost  penalty,  in  units  of  attenuation 
cost  (c),  is  obtained  by  substituting  X for  x in  Equation  (38).  A 
reasonable  approximation  to  the  effectively  zero  failure  probability 
is  obtained  by  setting  X = 2.3.  For  this  value,  the  conservative 
failure  probability  is  10  percent  of  the  optimum  failure  probability 
and  the  cost  penalty  is  1.4  attenuation  cost  units. 
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For  a numerical  example  of  this  approach,  consider  the 
optimum  failure  probability  for  a deep-buried  facility  in  granodiorite 
to  protect  part  of  the  field  headquarters  of  a military  unit. 

Assume  that  loss  of  the  facility  would  result  in  reduced  effectiveness 
of  the  unit  and  replacement  costs  for  personnel  and  equipment.  Let 
this  net  failure  cost  be  expressed  as  5.0  x 10^  dollars.  Assume  the 
initial  cost  of  the  facility  is  the  following  function  which  is 
dependent  only  on  burial  depth: 


Cj  = 4.2x  106  - 695D  + 2D2  + 7240D5'06 


This  includes  3.6  x 10D  dollars  for  construction  of  the  facility 
after  the  composite  steel /concrete  liner  is  complete.  By  means  of 
the  probabilistic  structural  design  approach  described  in  paragraph  11, 
a functional  relationship  can  be  established  between  initial  cost 
and  failure  probability.  Assume  that  a probabilistic  design  study 
results  in  the  following  functional  relationship: 


PF  = 79.652  x 106  exp 


(— 

\ 0.216* 


The  optimum  failure  probability  determined  from  Equations  (36) 
and  (37)  is  simply 


P - (jL\  - JhUl 
F0  \c  F]  5.0 


216  x 10 


= 0.0432 


Thus,  for  this  example,  the  optimum  failure  probability  is  approxi- 
mately 4.3  percent.  The  initial  cost  for  this  design  is  4.6  x 10^ 
dollars  which  corresponds  to  a burial  depth  of  approximately  650 
meters.  The  effectively  zero  failure  probability  is  then  approximately 
0.43  percent.  The  burial  depth  of  approximately  875  meters  corresponds 
to  an  increase  in  initial  cost  of  approximately  0.5  x 106  dollars. 


The  primary  difficulties  in  applying  the  minimum  expected 
cost  hypothesis  are  concerned  with  the  determination  of  initial 
costs  and  net  failure  costs.  Presumably,  suitable  data  can  be 
generated  for  estimating  initial  (life-cycle)  costs'  of  proposed 
hardened  facilities.  According  to  Agbabian  Associates  (Reference  23, 
page  I- 1 1 ) , these  life-cycle  costs  should  include  the  present  worth 
of  the  development,  capitalization,  operations,  and  maintenance 
costs.  To  the  extent  that  these  costs  are  constant  for  all  the 
alternative  structures  within  a scheme,  the  costs  may  be  neglected. 

As  shown  in  Equation  (36),  this  simplification  is  justified  because 
the  attenuation  cost  is  unaffected  by  a change  in  the  proportionality 
constant. 

Incidentally,  while  the  present  expected  cost  model  was 
not  originally  intended  as  a system  cost-effectiveness  model  for 
comparing  alternative  schemes,  it  may  be  so  used  if  such  factors  as 
technical  effectiveness  and  implementation  period  can  be  converted 
to  equivalent  initial  costs.  One  may  observe  that  "implementation 
period"  is  already  converted  to  "equivalent  dollars"  through  the 
incentive  and  penalty  clauses  of  construction  contracts.  This  fact 
suggests  that  perhaps  applicability  of  the  expected  cost  model  may 
rationally  be  extended  to  system  analysis. 

Determining  the  net  failure  cost  associated  with  the  loss 
of  a hardened  facility  under  attack  is  a difficult  and  controversial 
task.  This  is  especially  true  for  situations  in  which  nonmonetary 
consequences  of  failure  are  much  more  significant  than  such  monetary 
considerations  as  replacement  costs.  The  use  of  questionnaires  to 
determine  interpretations  of  national  goals  and  priorities  by  appropri- 
ate government  decision  makers  appears  essential  to  this  task.  The 
successful  use  of  such  questionnaires  to  gather  expert  opinion  in 
the  field  of  structural  analysis  and  testing  is  described  in  Reference  24 
(Appendix  B). 
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In  Reference  25  (page  91),  Turkstra  suggests  defining  the 
net  failure  cost  directly  in  dollars  by  using  Equation  (35)  along 

with  the  results  to  a question  of  the  form:  “If  a failure  probability 

-4  9 

of  10  leads  to  an  initial  cost  of  10  dollars,  what  increase  in 

initial  costs  would  you  accept  to  reduce  the  failure  probability  to 
-5 

10  ?"  This  approach  appears  difficult  to  implement  in  practice 
because  of  problems  with  relating  such  small  probabilities  to  practi- 
cal experience. 


An  alternate  approach  consists  of  expressing  both  initial 
cost  and  net  failure  cost  in  terms  of  reduction  in  national  capability.* 
For  initial  costs,  the  alternate  approach  involves  defining  a linear 
relationship  between  the  utility  of  dollars  and  the  utility  of 
national  capability.  The  resulting  linear  utility  function  could 
then  be  used  to  convert  estimated  life-cycle  costs  in  dollars  into 
units  of  equivalent  national  capability.  Evaluating  utilities  by 
this  indirect  method  is  recommended  by  Raiffa  and  Schlaifer  (Reference  13 
page  80)  for  situations  having  mixed  monetary  and  nonmonetary  conse- 
quences. The  required  utility  function  could  be  obtained  from  a 
"least-squares"  fit  to  the  results  of  several  questions  of  the  form: 

"By  what  percentage  could  the  national  capability  be  increased  by 
the  present  expenditure  of  X dollars?"  The  term  "national  capability" 
would,  of  course,  require  a precise  and  generally  accepted  definition. 


For  net  failure  costs,  the  alternate  approach  involves 
averaging  the  results  of  a question  which  uses  the  concept  of  a 
lottery. 


"Consider  the  following  three  events: 

A n,  total  national  capability  with  the  proposed  facility 
B 'v  reduced  national  capability  if  the  facility  is  lost 
during  attack, 

C ^ no  effective  national  capability. 


This  suggestion  is  due  to  Carl  Bagge  of  Agbabian  Associates 


Now,  consider  the  following  two  options: 

(1)  event  B for  certain,  or 

(2)  a lottery  involving  event  A with  probability  (1-p) 
and  event  C with  probability  p. 

Note  that  if  p is  close  to  zero,  the  lottery  is  your 
preferred  option  since  the  most  desirable  event  (A)  is  likely  to 
occur.  And  if  p is  close  to  unity,  the  certain  event  (B)  is  prefer- 
able to  the  likely  occurrence  of  the  most  undesirable  event  (C).  As 
p changes  from  0 to  1 , a preference  for  the  lottery  option  must 
change  into  a preference  for  the  certain  option.  What  is  the  value 
of  p at  which  you  are  indifferent  to  the  two  options?" 

At  the  indifference  point,  the  expected  utilities  between 
the  two  options  are  equal: 

U ( A)  • (1  -p)  + U(C)  • p = U ( B)  • 1 (40) 


If  event  A has  utility  1 and  event  C has  utility  0,  then 
by  Equation  (40)  the  utility  of  event  B is  equal  to  1-p.  In  units 
of  national  capability,  the  net  failure  cost  is  therefore  numerically 
equal  to  p.  This  general  approach  to  assigning  utilities  in  terms 
of  preferences  between  alternatives  is  included  in  the  detailed 
discussion  of  utility  theory  in  Reference  17  (Section  2). 

The  use  of  questionnaires  appears  feasible  to  evaluate 
both  the  utility  of  dollars  in  terms  of  national  capability  and  the 
utility  of  reduced  national  capability  in  event  of  failure  of  the 
proposed  facility.  Using  average  values  of  the  experts'  answers  to 
the  questions  also  appears  consistent  with  the  use  of  certainty 
equivalents  for  unknown  costs  as  outlined  in  Figure  4.  Thus  the 
selection  of  acceptable  failure  probability  using  the  minimum  expected 
cost  hypothesis  for  hardened  facilities  does  appear  feasible  and 
worthy  of  further  study. 
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5.  PROBABILISTIC  DESIGN  REQUIREMENTS 

The  specification  of  design  requirements  in  a probabilistic 
manner  is  consistent  with  the  application  of  probabilistic  structural 
design  concepts  to  deep-buried  hardened  facilities.  The  explicit 
evaluation  of  failure  probability  as  a function  of  cost  can  lead  to 
the  optimum  use  of  resources.  Studies  for  determining  the  probability 
of  failure  may  be  performed  using  techniques  such  as  those  described 
in  paragraph  4.  Since  attack  conditions  are  not  known  with  certainty, 
design  requirements  should  be  realistically  specified  as  required 
failure  probability  and  as  probabilistically  described  attack  condi- 
tions. The  following  indicates  a convenient  procedure  for  including 
probabilistic  attack  conditions  in  the  structural  design  of  deep- 
buried  hardened  facilities. 

For  a deep-buried  hardened  facility,  the  peak  transient 
free-field  compressive  stress  at  depth  due  to  a surface  nuclear 
burst  is  influenced  greatly  by  the  transmissibility  of  the  stress 
waves  through  the  earth.  Since  the  transmissibility  characteristics 
of  in  situ  earth  materials  cannot  be  known  with  certainty,  a statisti- 
cal description  of  these  characteristics  is  appropriate.  Such 
descriptions  are  presented  by  Perret  and  Bass  in  Reference  26  for 
various  rock  types.  These  descriptions  are  of  the  form 


p ' = A 

o o 


wl.ere 


P^  = free-field  stress  at  depth  in  pounds  per  square 
inch  (psi) 

W = weapon  yield  (underground)  in  kilotons  (KT) 

R = range  in  meters. 


The  coefficient  Aq  is  presented  as  a lognormal  random 
variable  describing  rock  transmissibil ities . The  exponents  are 
assumed  constant.  A somewhat  more  general  formulation  of  Equation  (41) 


where 


free-field  stress  (psi)  at  depth 

weapon  yield  (KT)  at  surface 

weapon  effectiveness  factor  or  coupling  factor 

depth  in  meters,  and 

lateral  range  in  meters. 


Again,  A is  lognormal  and  the  exponents  are  assumed 


constant 


Since  the  rock  transmissibilities  are  represented  probabilis 

tically  in  Equation  (42),  specifying  the  attack  conditions  (K  , W , 

w s 

and  LR)  similarly  seems  consistent  and  appropriate.  Specifying  a 
deterministic  attack  condition  for  design  seems  unnecessarily  restric- 
tive. The  uncertainties  associated  with  weapon  yield,  effectiveness 
of  a near-surface  burst  in  generating  stress  waves  in  the  rock,  and 
lateral  range  at  detonation  (i.e.,  miss  distance  of  the  attacking 
weapon)  are  significant  and  can  be  realistically  included  in  the 
design  process. 


The  uncertainties  associated  with  the  attack  conditions 
may  be  combined  with  the  random  rock  transmissibilities  using  either 
the  first-order  Taylor's  series  approximation  or,  somewhat  more 
accurately,  the  product  of  lognormal  random  variables.  Both  methods 
are  described  in  paragraph  2.  From  the  latter  approach,  the  mean 
value  of  the  lognormal  free-field  compressive  stress  of  Equation  (42) 

71"  = T"  /V  TIT  \a  /K*Tb2\*  /i  ^ V/2  ^ w 2 \“/2  (o-1)  / , . w 2\6/*(8“l) 


The  corresponding  coefficient  of  variation  is  obtained  from 


The  coefficient  of  variation  (V^)  of  the  squared  slant  range  is 
adequately  represented  by  the  first-order  Taylor's  series  approximation 


The  facility  burial  depth  (D)  has  a relatively  small 
uncertainty  which  is  determined  primarily  by  the  terrain  elevations. 

The  lateral  range  (LR)  is  often  represented  by  the  Rayleigh  distribution 
(Reference  27,  page  320).  Since  the  Rayleigh  distribution  is  adequately 
represented  by  the  lognormal  probability  law,  the  squared  slant 
range  is  approximately  lognormally  distributee . For  the  Rayleigh 
distribution,  the  mean  lateral  range  is  related  to  the  median  range 
as  follows: 


The  coefficient  of  variation  of  a Rayleigh  distribution  in  constant 
(0.5227),  thus  the  coefficient  of  variation  for  the  lateral  range  is 


Thus  the  probabilistic  attack  conditions  may  he  conveniently  and 
realistically  included  in  the  design  process  by  the  use  of  Equations  (43) 
through  (47). 


SECTION  III 

STRUCTURAL  DESIGN  APPLICATION 


GENERAL 


The  probabilistic  structural  design  concepts  described  in 
paragraph  2 are  illustrated  in  a practical  design  example.  The  example 
hardened  facility  element,  a composite  steel /concrete  liner  for  a deep- 
buried  tunnel,  is  described  in  paragraph  7.  The  analytical  approach  for 
the  deterministic  design  of  a rock/liner  tunnel  system  is  presented  in 
paragraph  8.  The  data  base  required  for  either  deterministic  or  probabilistic 
design  studies  is  presented  in  paragraph  9 while  the  studies  themselves 
are  presented  in  paragraphs  10  and  11.  A comparison  between  the  deter- 
ministic and  probabilistic  structural  design  approaches,  for  the  deep- 
buried  tunnel  example,  is  included  in  paragraph  12. 


7. 


DESCRIPTION  OF  EXAMPLE  HARDENED  FACILITY  ELEMENT 


The  example  chosen  to  illustrate  the  probabilistic  design 
approach  is  a composite  steel  and  concrete  liner  for  a deep  under- 
ground facility  in  rock.  The  liner  is  for  a hypothetical  deep- 
buried  facility,  and  the  example  is  not  intended  to  represent  any 
particular  past  or  future  hardened  defense  facility.  However,  the 
example  facility  is  assumed  to  be  of  sufficient  strategic  importance 
to  justify  a conservative  design.  This  design  example  is  concerned 
with  the  characteristics  of  the  steel  plate  and  concrete  rock  reinforce- 
ment, with  the  required  depth  of  burial,  and  with  the  corresponding 
construction  costs.  The  example  therefore  has  all  of  the  significant 
parameters  affecting  the  design  of  an  actual  deep-buried  hardened 
facility. 


Figure  6 illustrates  a liner  cross-section  for  a drift  in 
the  hypothetical  defense  facility.  The  equipment  and  personnel 
within  the  rock  cavity  liner  are  assumed  to  be  shock  isolated.  The 
rattlespace  envelope  around  the  isolation  system  and  required  equip- 
ment is  assumed  to  accommodate  noncatastrophic  liner  deformations. 
Therefore,  catastrophic  failure  of  the  liner  is  the  critical  system 
design  condition.  The  tunnel  diameter  of  14  feet  is  considered 
typical  of  part  of  a defense  system.  The  length  of  the  drifts 
becomes  very  important  to  the  liner  design  when  costs  are  considered. 
If  a drift  is  short,  the  optimum  design  has  the  strongest  possible 
liner  in  order  to  reduce  the  burial  depth.  However,  if  a drift  is 
long,  liner  costs  are  relatively  more  significant  and  a greater 
burial  depth  provides  a more  economical  option. 


ACTION  OF  LINER  AND  ROCK 


Figure  6.  Deep -buried  h<xdened  facility  example 


For  this  example  design,  the  threat  is  assumed  to  be  a 
single  direct  hit  from  a 25  megaton  surface  burst.  The  weapon 
effectiveness  factor  (kw)  is  assumed  to  be  0.04.  This  factor  describes 
the  effectiveness  of  a surface  burst  in  generating  stress  waves  in  the 
rock.  Probabilistic  descriptions  of  miss  distance  and  weapon  yield 
are  not  necessary  to  illustrate  the  design  approach.  Such  probabilistic 
attack  conditions  could  easily  be  incorporated  as  discussed  in  paragraph 
6.  For  the  probabal istic  design  studies  described  in  paragraph  11, 
single  acceptable  failure  probability  was  not  specified  explicitly.  A 
range  of  failure  probabilities  was  assumed  in  the  probabilistic 
parametric  design  studies. 

% 


8.  DETERMINISTIC  DESIGN  APPROACH 


For  both  deterministic  and  probabilistic  structural  design 
approaches,  analytical  relationships  are  required  for  relating 
applied  loads  (P1  ) with  allowable  strengths  (P  ) . For  deep-buried 
hardened  facilities,  the  applied  load  is  generally  described  by  the 
Perret-Bass  data  (Reference  26)  in  terms  of  free-field  compressive 
stress  at  depth  (P'0).  The  allowable  strength  of  steel /concrete 
rock  cavity  linings  is  generally  determined  by  Newmark's  method 
(Reference  28,  paragraph  8.11.2).  This  method  relates  the  free- 
field  compressive  stress  (P  ) to  the  various  stresses  and  strains  in 
the  steel,  concrete,  and  rock.  Figure  7 illustrates  the  significant 
stresses  in  the  rock/liner  structural  system,  a . is  the  radial 
confining  pressure  applied  to  the  concrete  liner  by  the  steel  liner. 
orc  is  the  radial  confining  pressure  applied  to  the  rock  by  the 
concrete  liner. 

The  various  simplifying  assumptions  inherent  in  Newmark's 
method  include  the  following: 

(a)  The  analysis  of  the  concrete/steel  liner  and  surround- 
ing rock  may  be  treated  as  a plain  strain  problem. 

This  obviously  excludes  tunnel  ends  and  intersections. 

(b)  The  dynamic  response  of  the  tunnel  liner  to  the 
applied  transient  free-field  compressive  stress  may 
be  treated  as  quasi-static.  This  assumes  that  the 
free-field  pressure  waveform  has  slow  rise  and  decay 
times  relative  to  the  natural  period  of  the  structure. 

(c)  The  applied  loading  and  the  resulting  stresses  and 
strains  may  be  treated  as  having  radial  symmetry. 

This  requires  that  K = 1 (in  Figure  7)  for  the  lateral 
stress  and  that  no  bending  occurs  in  the  liner. 
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(d)  Rock  and  concrete  may  be  treated  as  1 inearly-elastic/ 
perfectly-plastic  materials  which  follow  the  Mohr- 
Coulomb  strength  criterion.  This  imposes  requirements 
on  the  types  of  material  data  applicable  to  this 
design  method. 

(e)  Steel  may  be  treated  as  a rigid-plastic  material 
whose  elastic  strain  is  negligible  compared  with  the 
rock  and  concrete  strains. 

(f)  Circumferential  strains  may  be  treated  as  continuous 
across  the  concrete/steel  and  the  rock/concrete 
interfaces. 


Failure  of  the  rock/liner  system,  according  to  Newmark’s 
method,  is  assumed  to  occur  when  circumferential  strains  exceed 
allowable  values.  Generally,  excessive  strain  in  the  concrete/steel 
liner  is  assumed  to  be  the  only  possible  failure  mode.  However, 
excessive  strain  in  the  rock  at  the  rock/concrete  interface  could 
also  be  a possible  failure  mode  for  such  brittle  rock  types  as 
granite.  For  this  study,  excessive  strains  in  the  concrete/steel 
liner  and  in  the  rock  are  both  assumed  to  be  possible  independent 
failure  modes.  A single  failure  mode  may  be  considered  if  it  is  proven 
the  other  failure  mode  does  not  influence  the  result. 

Newmark's  method  relates  material  strains  to  free-field 
pressure  at  the  elastic/plastic  interface.  This  interface  could 
occur  in  steel  or  concrete  or  rock,  depending  on  the  steel  liner 
strain  assumed  for  the  sequential  calculations.  The  most  efficient 
rock/liner  structural  system  exists  when  a significant  amount  of 
rock  is  in  a state  of  plastic  flow.  For  this  situation  in  which 
both  the  steel  liner  and  the  concrete  liner  have  yielded  plastically, 
Newmark's  method  reduces  to  a single  equation  expressed  in  terms  of 
the  geometric  and  material  characteristics  of  the  rock/liner  system. 
This  equation  is  subsequently  referred  to  as  "Newmark's  equation." 
When  the  failure  conditions  are  expressed  as  allowable  rock  or 
concrete  liner  strains,  Newmark's  equation  may  be  used  to  determine 


the  corresponding  allowable  free-field  compressive  stresses  in  the 
rock.  The  equations  for  allowable  free-field  stress  (PQ)  in  terms 
of  the  two  possible  failure  strains  are  presented  in  Appendix  A.l. 

Although  Newmark's  method  is  used  exclusively  in  this 
study,  other  methods  are  available  for  relating  free-field  stress  to 
rock/liner  system  failure.  One  such  method,  documented  in  Reference 
29,  is  similar  to  the  Newmark  method  except  that  the  assumption  of  a 
hydrostatic  stress  distribution  is  not  required.  Solution  of  the 
general  equations  with  radial  symmetry  (K  = 1)  provides  the  same 
stresses  and  strains  as  Newmark's  method.  Reference  29  presents 
these  general  equations  along  with  results  of  tests  using  small- 
scale  lined  tunnels.  Another  alternative  method  is  the  finite- 
element  method  which  is  probably  the  most  versatile  approach  for 
relating  free-field  stress  to  rock/liner  system  failure.  Such 
numerical  solutions  do  not  require  the  limiting  assumptions  inherent 
in  the  closed-form  solutions.  Material  mechanical  properties  can  be 
modeled  as  accurately  as  test  data  permit.  Sliding  boundaries  may 
be  used  to  represent  rock  jointing.  The  major  drawback  of  the 
finite-element  solutions  compared  with  the  closed-form  solutions  is 
the  significant  increase  in  computer  time  and  the  lack  of  visibility 
of  the  effects  of  particular  design  parameters.  In  general,  the 
closed-form  solutions  are  recommended  for  preliminary  design  studies 
and  the  finite-element  simulations  are  recommended  for  final  design 
verification. 

For  convenience  in  evaluating  the  construction  cost  of 
deep-buried  tunnels  having  composite  steel /concrete  liners,  a general 
cost  function  has  been  determined  as  follows: 


Cl  * D (MM  + BB-D  + C)  + R [E(ra  • RC  A)2  • DF 

+ C + G • ra- hs+  H- ra2  (RCA2  - 1 )]  (48) 


where 


Cl  --construction  cost  (dollars) 

D —tunnel  depth  (meters) 

R -tunnel  length  (meters) 
r -outer  radius  of  steel  liner  (inches) 

d 

RCA-  ratio  of  concrete  outer  radius  to  steel  outer 
radius 

hs  -thickness  of  steel  liner  (inches) 

MM  -cost  parameter  for  access  shaft  excavation 

BB  -cost  parameter  for  access  shaft  excavation 

C -cost  parameter  for  venting 

E -cost  parameter  for  main  tunnel  excavation 

F -cost  parameter  for  main  tunnel  excavation 

G -cost  parameter  for  steel  liner 

H -cost  parameter  for  concrete  liner 

The  cost  parameters  are  established  from  existing  cost 
data  and  contractors'  estimates.  The  estimated  construction  cost 
for  any  given  set  of  design  parameters  (D,  R,  r , and  RCA)  can  then 
be  determined  from  Equation  (48).  Other  design  parameters,  such  as 
concrete  strength,  could  be  included  in  the  cost  equation  for  more 
detailed  estimates. 


9. 


DATA  BASE 


9.1 


Applied  Load  Data 


The  site  location  for  the  hypothetical  facility  is  assumed 
to  be  either  in  soft  rock  (wet  tuff)  or  in  hard  rock  (granodiorite) . 
The  applied  load  data  for  both  types  of  rock  are  obtained  from  the 
Perret-Bass  data  (Reference  26).  These  data  consist  of  measurements 
from  underground  tests  grouped  into  categories  of  rock  type.  The 
applicable  results  are  presented  in  plots  of  peak  free-field  particle 
velocity  versus  normalized  range  from  the  weapon  point.  Normalized 
range  is  defined  as  the  actual  range  in  meters  divided  by  the  actual 
weapon  yield  in  kilotons.  Peak  free-field  stress  is  related  to 
velocity  by: 


P 1 
o 


P cv 


(49) 


where 


p = rock  density 

c = wave  speed 

v = peak  free-field  particle  velocity 

The  measured  data  from  14  tests  in  wet  tuff  consist  of 
approximately  80  points  (Reference  26,  page  43).  A linear  regression 
analysis  was  performed  with  the  logarithms  of  the  peak  velocities 
and  corresponding  normalized  ranges.  The  resulting  equation  for  the 
median  of  the  applied  free-field  compressive  stress  in  wet  tuff  is 

(po)05s  (5.6  xT06)(Kw-Ws)°-52  (D2+  LR2)"°-7P  (50) 
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where 


jSj 

W* 


, 


w, 


s 

"w 

D 

LR 


free-field  stress  (psi)  at  depth 
weapon  yield  (KT)  at  surface 
weapon  effectiveness  factor 
depth  of  facility  in  meters  and 
lateral  range  in  meters. 


The  equation  of  the  upper  90%  confidence  limit  is  similarly  given  by 


(Po')0g=  (U.4  x!06)(Kw-Ws)°-52  (D2  + LR2)‘°-78 


(51) 


Since  the  normal  distribution  is  assumed  for  the  logarithms  of  the 
velocities  and  ranges  in  the  confidence  interval  calculation  of 


Reference  26,  the  coefficient  (Aq)  in  Equation  (42)  of  paragraph  5 may 


be  considered  a lognormal  random  variable  if  the  exponents  are  assumed 
constant. 


This  latter  assumption  is  justified  by  the  fact  that  the  coefficient 
of  variation  of  the  exponents  is  less  than  six  percent  according  to 
the  regression  analysis  (Reference  26,  page  42).  The  mean  and  coe- 


fficient of  variation  of  the  coefficient  (Aq)  for  wet  tuff  are 


determined  as  follows  using  the  inverses  of  Equations  (11)  and  (12): 


u * T«645 0 3 *n  04.4  x TO6)  * 16.4827 

U = in  (5. 6x  106 ) = T5.5383 
O = 0. 574 T 


.V^7.o. 


625 


’(l/l  *V2')  = 6. 


60  x TO6  psi 
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The  measured  data  from  9 underground  tests  in  hard  rock 
consist  of  approximately  150  points  (Reference  26,  page  47).  A 
regression  fit  of  these  data  provided  the  following  equation  for  the 
median  of  the  free-field  stress  in  hard  rock: 


(P0‘)  * 34.  T x TO6  ( Kw  > W$  ) 0,5733  (D2+  LR2)”0*86  (52) 


The  corresponding  equation  for  the  upper  90%  confidence  limit  is: 


(P0,)0  9 = 93.  3 x TO6  (Kw- W$)0-5733  (D2+  *°‘86  ( 53) 


If  the  exponents  are  assumed  constant,  the  mean  and  coefficient  of 

variation  for  the  lognormal  coefficient  (A  ) for  hard  rock  are  A = 

6 oo 

41.1  X 10°  psi  and  = 0.674.  Since  the  coefficient  of  variation 

of  the  exponents  is  7.3  percent,  according  to  the  regression  analysis 

(Reference  26,  page  45),  this  assumption  is  considered  justified. 

9.2  Geometrical  and  Material  Property  Data 

The  allowable  strength  corresponding  to  a specified 
circumferential  strain  at  failure  is  determined  from  Newmark's 
equation  using  the  geometrical  and  material  parameters  defined  in 
Appendix  A.l.  Data  values  for  these  parameters  are  presented  in 
Table  4.  The  data  for  the  steel  liner  were  obtained  from  the  Wiggins 
study  of  the  Mighty  Epic  test  (Reference  8,  page  3-15).  The  data 
for  the  concrete  unconfined  compressive  strength,  the  concrete 
elastic  modulus,  and  the  Poisson's  ratio  for  concrete  were  obtained 
from  the  1971  ACI  code  (Reference  30).  Dynamic  factors  to  account 
for  high  strain  rate  effects  are  included  in  the  steel  and  concrete 


Table  4.  Geometrical  and  material  property  data. 


Parameter 

Symbol 

Steel  outer  radius 

ra 

Steel  yield  stress 

°y 

Steel  liner  thickness 

h 

s 

Concrete  unconfined 
compressive  stress 

f ' 
c 

Concrete  friction- 
dependent  constant 

Ksc 

Concrete  elastic  modulus 

Ec 

Concrete  Poisson's  ratio 

vc 

Wet  tuff  unconfined 
compressive  stress 

°ur 

Wet  tuff  friction- 
dependent  constant 

Ksr 

Wet  tuff  elastic 
modulus 

Er 

Wet  tuff  Poisson's  ratio 

vr 

Concrete  outer  radius 

rco 

Granodiorite  unconfined 
compressive  stress 

°ur 

Granodiorite  friction- 
dependent  constant 

Ksr 

Granodiorite  elastic 
modulus 

Er 

Granodiorite  Poisson's 
ratio 

vr 

Unit 

Mean 

(m) 

Coefficient 
of  Variation 
(V) 

inch 

84 

0.005 

psi 

52800 

0.06 

inch 

(Design  ) 
variable 

0.003 

psi 

7020 

0.0556 

-- 

4.1 

0.341 

psi 

5.0  x 106 

0.04 

-- 

0.30 

0 

psi 

4000 

0.475 

-- 

1.19 

0.17 

psi 

0.653  x 106 

0.306 

— 

0.39 

0 

inch 

(Design  ) 
variable 

0.02 

psi 

24600 

0.226 

— 

2.45 

0.205 

psi 

9.31  x 106 

0.194 

_ _ 

0.31 

0 




data  as  recommended  by  Reference  28.  The  data  for  the  friction- 
dependent  constant  for  concrete  were  determined  from  confined  compres- 
sive test  data  (Reference  28,  paragraph  8.2.2)  as  shown  in  Figure 
8. 

he  rock  data  were  based  on  existing  data  from  two  different 
underground  test  programs.  The  site  location  for  the  hypothetical 
soft  rock  design  was  assumed  to  be  near  the  structures  drift  in  the 
Mighty  Epic  nuclear  test  site.  The  rock  data  for  this  site  are 
based  on  data  from  References  31  and  32.  The  results  of  a linear 
regression  analysis  using  the  compression  test  data  are  shown  in 
Figure  9.  The  site  location  for  the  hypothetical  hard  rock  design 
was  assumed  to  be  near  the  Hard  Hat  test  site.  The  rock  data  for 
this  site  are  based  on  data  from  Reference  33.  Figure  10  illustrates 
the  linear  regression  analysis  performed  with  the  compression  test 
data. 

Two  basic  assumptions  were  involved  with  using  these  rock 
strength  properties.  First,  the  effect  of  overburden  or  in  situ 
stress  on  rock  strength  is  neglected.  The  rock  properties  used  for 
this  study  are  based  on  bore  hole  data  from  depths  not  necessarily 
the  same  as  the  depth  of  the  hypothetical  facility.  It  was  assumed 
that  a strength  increment  existed  which  was  above  the  rock  strength 
used  in  the  analysis  and  which  was  sufficient  to  react  the  static 
long-term  overburden  loads.  Second,  the  measured  rock  strength 
properties  are  assumed  to  represent  accurately  the  in  situ  properties 
of  the  rock.  Thus  local  effects  of  jointing  and  inhomogeneities 
occurring  in  the  in  situ  rock  mass  but  not  in  the  particular  bore 
hole  specimens  are  neglected.  However,  the  granodiorite  specimens 
tested  and  described  in  Reference  33  did  contain  small  joints  which 
significantly  affected  the  measured  rock  properties.  Also,  the 
Mighty  Epic  bore  hole  specimens  indicated  a significant  strength 
variation  along  the  tunnel.  Since  this  wet  tuff  was  treated  as  a 
single  rock  geology,  the  variation  along  the  tunnel  was  included  in 
the  statistical  variations  of  the  rock  properties. 
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7 


Confining  Pressure,  a T , pst  x 10 


Figure  10.  Strength  of  granodiorf  te  . 
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The  rock  strength  properties  for  a real  design  situation 
should  be  obtained  from  bore  hole  specimens  from  the  depths  of 
interest.  This  is  because  rock  strength  is  affected  by  the  depth 
and  in  situ  stress  at  which  the  rock  was  formed.  The  required 
triaxial  compression  tests  should  duplicate  as  nearly  as  possible 
the  principal  stress  relationships  and  strain  rates  occurring  in  the 
design  load  conditions.  In  particular,  the  test  confining  pressures 
(a  ) should  be  within  the  range  of  interest  for  the  design. 


According  to  Newmark's  method,  failure  of  the  rock/liner 
system  is  assumed  to  occur  when  circumferential  strains  exceed 
allowable  values.  For  this  study,  excessive  strains  in  the  concrete/steel 
liner  (ec)  and  in  the  rock  (er)  are  both  assumed  to  be  possible 
independent  failure  modes.  Structural  failure  is  defined  as  the 
point  at  which  unlimited  strain  occurs  with  any  increase  in  load. 

This  definition  of  structural  failure  is  consistent  with  the  func- 
tional failure  of  the  system  occurring  when  the  liner  impacts  the 
contained  equipment.  This  catastrophic  motion  could  result  either 
from  liner  buckling  or  from  plastic  shear  flow  of  the  rock  causing 
local  liner  failure  due  to  nonuniform  loading. 


The  test  data  base  for  residual  liner  strains  and  interface 
pressures  between  the  rock  and  concrete  is  based  on  the  60-day 
results  from  the  Mighty  Epic  event  (Reference  34).  Since  the  measured 
liner  strains  at  failure  indicate  significant  bending,  these  strains 
were  averaged  around  the  circumference  for  compatibility  with  the 
assumption  of  axial  symmetry  required  by  Newmark's  equation.  The 
average  strain  for  each  liner  specimen  was  computed  using  mean  rock, 
concrete,  and  steel  properties.  These  strains  were  compared  with 
the  test  predictions,  the  conclusions  of  Reference  8,  and  the  degree 
of  failure  in  the  test  (complete,  partial,  or  none).  Based  on  these 
data  and  subjective  considerations,  the  following  values  were  assigned 
to  the  mean  and  coefficient  of  variation  of  the  concrete/steel  liner 
failure  strain: 


Excessive  strain  in  the  rock  implies  a sufficient  volume 


of  rock  being  in  a state  of  plastic  flow  that  bulking  (expansion) 
along  a flow  line  leads  to  a catastrophic  nonuniform  loading  of  the 
liner.  Since  an  empirical  data  base  is  currently  unavailable  for 
this  type  of  failure,  the  rock  strains  at  failure  were  based  on 
triaxial  test  results  from  References  32  and  33.  For  the  wet  tuff, 
the  following  values  were  assigned  to  the  mean  and  coefficient  of 
variation  of  failure  strain: 

msr  = 0.06  V$r  = 0.04 

The  corresponding  values  for  the  granodiorite  failure  strain  are  as 
follows: 

msr  = 0.05  Vsr  = 0.55 

9.4  Cost  Data 


The  cost  data  are  based  on  data  from  the  Hardrock  nuclear 
test  program,  data  provided  informally  by  the  DNA  field  command, 
data  from  the  Deep  Sanguine  project,  and  1976  Means  Cost  Data,  Ref.  37.  All 
cost  data  have  been  adjusted  to  a 1976  base.  The  data  are  used  only 
to  illustrate  the  effects  of  cost  in  the  design  of  the  hypothetical 
deep-buried  facility.  The  general  cost  function  proposed  to  estimate 
construction  costs  of  deep-buried  tunnels  is  given  by  Equation  (48)  of 
paragraph  8.  The  values  of  the  cost  parameters  used  for  the  present 
study  are  as  follows: 


MM  = 305 

F = 0.08 

BB  = .0 

G = 2.33 

C = 99.0 

H = 0.0178 

E = 0.202 
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DETERMINISTIC  DESIGN  STUDIES 


The  deterministic  design  procedure  is  based  on  the  Newmark 
method  described  in  paragraph  8 and  Appendix  A.l  and  on  the  data 
base  described  in  paragraph  9.  The  designer  first  selects  a trial 
steel  and  concrete  liner  section.  The  governing  failure  condition 
is  then  determined  by  substituting  the  rock  mean  failure  strain 
(msr)  for  er  in  Equation  (54)  and  then  comparing  the  resulting  ec 
with  the  concrete  mean  failure  strain  (m  ). 


Depending  on  which  failure  condition  is  critical,  the  allowable 
free-field  stress  is  then  determined  from  Equations  (A-l)  and(A-4) 
combined  with  either  Equation  (A-2)  or  Equatirn  (A-3).  The  resulting 
allowable  free-field  stress  (PQ)  is  then  compared  with  the  applied 
free-field  pressure  (P  1 ) from  the  Perret-Bass  equations  (paragraph 
9.1)  to  determine  the  required  burial  depth.  The  construction  cost 
for  this  design  is  then  determined  from  Equation  (48).  This  procedure 
may  be  repeated  with  different  trial  liner  sections. 


For  the  present  deterministic  design  studies,  the  critical 
failure  strains  occur  in  the  steel/concrete  liner  for  both  types  of 
rock.  Nominal  (mean)  values  are  used  for  failure  strain  and  for  all 
geometrical  and  material  properties  except  for  rock  strengths.  The 
rock  strength  properties  are  obtained  as  the  "lower  bounds"  of  the 
triaxial  test  data  shown  in  Figures  9 and  10.  The  applied  free- 
field  pressure  coefficients  (AQ)  are  the  upper  90  percent  confidence 
limits.  The  construction  costs  are  based  on  a tunnel  length  of  100 
meters.  These  deterministic  design  data  are  included  with  a summary 
of  the  design  calculations  in  Table  5. 


Table  5.  Deterministic  design  summary, 


Granodiorite 


ra  (inch) 


rco  (inch) 


o (psi) 
rc  K ' 


a (psi) 
ur  ' 


P0  (psi) 


785.7 


785.7 


15400 


Ws  (KT)  25000 


25000 


Source 


Paragraph  7 


Trial  Design  Variable 

Equation  (A-10) 

Trial  Design  Variable 

tquation  (A-ll) 

Equation  (54) 

Figures  9 and  10 
"Lower  Bound"  Values 


46035  Equations  (A-l),  (A-3), 

(A-4) 

93.3  x 10^  Upper  90%  Confidence 

Limit 

0.04  Paragraph  7 


Paragraph  7 


Equation  (42) 


Cl  (dollars)  4.42  x 10°  2.11  x 10b  Equation  (48) 
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11.  PROBABILISTIC  DESIGN  STUDIES 

A probabilistic  design  approach  for  deep-buried  lined 
tunnels  requires  descriptions  of  the  randomly  varying  loads  and 
strengths.  The  random  applied  loads  are  the  lognormal  free-field 
stresses  from  the  Perret-Bass  data  (Reference  26).  The  random 
allowable  strengths  are  obtained  from  the  deterministic  analytical 
relationships  of  Newmark's  equation  (paragraph  8 and  Appendix  A.l) 
by  means  of  the  Taylor's  series  method.  As  suggested  by  Equation 
(17),  the  mean  of  the  allowable  free-field  stress  is  approximated  by 
Equation  (A-l)  evaluated  at  the  mean  values  of  all  the  variables  and 
parameters,  including  the  circumferential  failure  strain.  The 
corresponding  variance  of  the  allowable  free-field  stress,  as  suggested 
by  Equation  (18),  is  approximated  in  terms  of  the  partial  derivatives 
of  Newmark's  equation.  The  partial  derivatives  required  for  the 
rock  failure  mode  and  for  the  concrete/steel  failure  mode  are  presented, 
respectively,  in  Appendices  A. 2 and  A. 3. 

Failure  of  the  deep-buried  tunnel  is  assumed  to  occur  when 
circumferential  stresses  exceed  allowable  values  either  in  the  rock 
or  in  the  steel /concrete  liner.  If  the  allowable  rock  strain  and 
allowable  liner  strain  are  approximately  equal,  the  failure  probability 
may  be  determined  from  the  assembly  reliability  approach  of  Equations 
(8)  through  (12).  Here  the  lognormal  applied  load  is  the  free-field 
compressive  stress  (P  ' ) given  by  the  Perret-Bass  relationship 
(Equation  42).  The  two  allowable  strengths  are  the  free-field 
compressive  stresses  (P  ) corresponding  to  the  rock  and  liner  failure 
strains.  The  allowable  strengths  are  also  considered  to  be  lognor- 
mal ly  distributed  by  virtue  of  the  central  limit  theorem  (Equations 
25  through  30).  The  allowable  strengths  are  assumed  to  be  statistic- 
ally independent  even  though  the  functional  relationship  imposes  a 
small  positive  correlation.  This  latter  assumption  therefore  results 
in  a slight  conservatism  in  the  calculated  failure  probability. 


Figure  11  illustrates  the  significance  of  considering 
explicitly  the  two  possible  failure  modes  in  a probabilistic  analysis. 
When  either  of  the  two  failure  modes  could  reasonably  occur,  then  the 
assembly  reliability  approach  is  recommended.  When  the  mean  failure 
strain  for  the  rock  greatly  exceeds  that  for  the  liner,  only  the  liner 
failure  mode  need  be  considered.  The  converse  is  true,  of  course, 
when  the  mean  liner  strain  greatly  exceeds  that  for  the  rock.  When 
only  one  of  the  two  failure  modes  could  reasonably  occur,  then  the 
component  reliability  approach  of  Equations  (1)  through  (6)  is 
recommended.  If  median  values  of  the  lognormal  load  and  strength  are 
used  to  define  the  design  limit  load  and  allowable  strength.  Equation 
(5)  reduces  to  the  following  general  equation  for  component  probability 
of  failure: 


where 


yiL  and  yj.  are  the  transformed  normal  parameters 
given  by  Equation  (11). 


The  probabilistic  design  procedures  is  directly  analogous  to 
the  deterministic  design  procedure  described  in  paragraph  10  except 
that  the  failure  probability  of  the  rock/liner  system  is  explicitly 
considered.  The  procedure  is  based  on  the  Newmark  method  (Appendix  A) 
and  on  applicable  probabilistic  concepts  (paragraph  2).  The  procedure 
also  incorporates  all  the  information  included  in  the  data  base 
described  in  paragraph  9.  As  with  the  deterministic  procedure,  the 
designer  first  selects  a trial  steel  and  concrete  liner  section.  The 
governing  failure  condition  is  then  studied  using  Equation  (54)  of 
paragraph  10.  If  either  of  the  two  failure  modes  can  be  ignored,  the 
required  design  limit  load  (Lp)  is  determined  from  Equation  (5)  as  the 
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allowable  strength  (S^)  divided  by  the  factor  of  safety  (FS)  for  a 
specified  probability  of  failure  (Pp) . The  corresponding  depth  can 
then  be  determined  given  the  design  limit  load  and  the  Perret-Bass 
equations  (paragraph  9.1).  The  construction  cost  for  this  trial 
design  is  again  determined  from  Equation  (48).  This  procedure  is 
directly  analogous  to  the  deterministic  design  procedure  so  long  as 
one  of  the  two  failure  modes  is  disregarded. 


If  both  failure  modes  need  to  be  considered,  the  trial 
design  must  include  the  burial  depth  as  well  as  the  liner  properties 
The  result  of  the  reliability  calculations  is  then  the  failure 
probability  corresponding  to  the  trial  design. 


A computer  program  has  been  developed  to  calculate  failure 
probabilities  for  the  rock/liner  structural  system  using  Newmark's 
equation  and  the  Taylor's  series  method.  Options  are  available  for 
considering  only  the  rock  failure  mode,  only  the  linear  failure  mode 
or  both  failure  modes  simultaneously.  The  program  also  computes  the 
required  individual  contributions  to  the  allowable  strength  variance 
and  thereby  identifies  the  parameters  having  the  most  significant 
uncertainties.  A listing  of  this  computer  program  is  presented  in 
Appendix  B. 


The  design  procedure  is  repeated  for  different  trial  designs 
until  the  specified  failure  probability  is  achieved.  The  construction 
cost  of  the  final  design  is  also  calculated  by  the  computer  program 
using  Equation  (48) . 


Several  design  examples  were  computed  for  the  tuff  and 
granodiorite  geologies  from  the  data  base  described  in  paragraph  9. 
The  computer  program  was  used  to  calculate  failure  probability  and 
cost  corresponding  to  fixed  liner  properties  at  several  different 


Figure  12.  Probability  of  failure  versus  depfh  of  burial. 


WET  TUFF 
(LINED) 


COST  VARIATION  OF 
DIFFERENT  DESIGNS 


GRANOD IOR ITE 


Prebabi lity  of  Failure 

Different  combinations  of  steel  thicknesses,  concrete  thickness 
and  burial  depths  were  varied.  Steel  thickness  was  varied  from 
6.35  mm  to  63.5  mm.  Concrete  thickness  was  varied  from 
0 to  381  mm.  Burial  depths  were  varied  from  550  mm  to  820  m, 
Steel,  concrete  and  rock  strengths  were  not  varied. 


Figure  T3.  Cost  versus  probability  of  failure 


depths  of  burial.  The  results  for  typical  costs  are  shown  in  Figure 
12  as  failure  probability  versus  depth  both  for  lined  tunnels  and  for 
unlined  tunnels.  Several  designs  were  based  on  the  deterministic 
approach  in  paragraph  10.  The  probability  failure  of  each  design  was 
computed  and  is  shown  in  Figure  12.  Failure  probabilities  for  designs 
based  on  the  deterministic  approach  (paragraph  10)  were  also  calculated 
and  are  also  shown  in  Figure  12.  As  indicated,  the  deterministic 
design  approach  results  in  failure  probabilities  which  are  neither 
clearly  specified  nor  the  same.  The  probabilistic  design  approach 
uses  the  data  base  in  a complete  and  rational  manner  and  provides  a 
direct  assessment  of  the  failure  probability. 

The  probabilistic  approach  also  permits  meaningful  studies 

of  failure  probability  versus  cost  as  shown  in  Figure  13  for  lined 

tunnels.  Such  data  does  provide  an  approach  to  decision  making 

regarding  the  economy  of  dispersion.  For  example,  when  the  cost  of 

o 

decreasing  the  failure  probability  from  Pp  to  (Pp)  exceeds  100  percent, 
increasing  the  number  of  facilities  from  one  to  two  is  economical. 

Figure  13  also  indicates  the  economy  of  optimizing  the 
design  parameters  to  minimize  cost  for  a specified  failure  probability. 
As  shown  for  the  granodiorite  example,  the  range  of  cost  variations 
for  different  designs  may  encompass  a factor  of  two  for  a given 
failure  probability.  The  uncertainty  in  the  rock  properties  affects 
the  cost  comparisons  between  wet  tuff  and  granodiorite.  Examples  in 
tuff  show  an  even  greater  cost  variation  for  small  failure  probabilities 
because  of  the  greater  uncertainty  in  the  tuff  load  and  strength 
properties  as  compared  with  the  granodiorite  properties. 

The  Taylor's  series  approach  provides  a rational  way  of 
identifying  the  design  parameters  whose  uncertainties  have  the  greatest 
impact  on  the  design  cost.  The  critical  parameters  in  order  of 
importance  are  as  follows: 


(1)  applied  free-field  stress  at  depth  (PQ * ) 

(2)  rock  strength  (Ksr  and  our) 

(3)  failure  strain  (er  and  ec) 

(4)  concrete  strength  (K  and  f '). 

sc  c 

The  elastic  properties  of  the  rock  and  concrete  do  not 
have  a significant  effect  or.  the  rock/liner  system  design  and  its 
resulting  cost. 

All  the  estimated  construction  costs  have  been  for  very 
short  tunnel  lengths.  A study  was  performed  to  determine  the  effect 
of  tunnel  length  in  a practical  design  situation  by  comparing  costs 
for  a tunnel  having  either  no  liner  or  an  inexpensive  commercial 
liner.  The  patented  Bernold  liner  consists  of  perforated  sheet 
metal  anchored  to  the  rock  with  shotcrete  placed  between  sheet  metal 
and  rock.  For  any  given  failure  probability,  the  lined  tunnel 
requires  a shallower  burial  than  the  unlined  tunnel.  Figure  14 
shows  the  tunnel  length  at  which  the  lined  tunnel  construction  cost 
equals  the  unlined  tunnel  cost  as  a function  of  failure  probability. 


The  coefficient  of  uncertainty  (u)  is  defined  in  paragraph 
2 to  account,  in  a conservative  manner,  for  uncertainties  in  the  analyt- 
ical prediction  of  the  random  loads  and  strengths.  For  practical 
designs,  this  coefficient  may  vary  from  1.1  for  sophisticated  analytical 
methods  to  perhaps  1.5  for  less  detailed  methods.  For  convenience  in 
this  design  example,  the  coefficients  of  uncertainty  for  load  and 
strength  were  assigned  the  value  of  unity  for  all  cases. 
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12. 

EVALUATION  OF  PROBABILISTIC  STRUCTURAL  DESIGN  APPROACH 

The  probabilistic  method  as  compared  to  the  deterministic 
method  has  several  advantages  and  disadvantages  when  applied  to 
hardened  structures.  Generally,  the  chief  advantage  of  the  probabil- 
istic method  is  that  it  can  provide  a more  parametrically  balanced 
design.  The  chief  disadvantage  is  that  it  requires  a more  difficult 
analysis  than  the  deterministic  method. 

The  deterministic  approach  can  provide  the  system  analysts 
with,  at  best,  three  data  points  for  any  design.  These  are  a conserva- 
tive design  data  point  (following  the  procedure  in  paragraph  10),  an 
unconservative  design  data  point  (based  on  upper  limit  code  strength 
properties  and  lower  limit  free-field  stress  values),  and  a typical 
value  based  on  typical  parameter  values.  The  system  analyst  often 
takes  the  third  point  at  a mean,  at  probability  of  failure,  although 

(the  parameter  values  are  based  on  intuition  and  are  usually  insufficient 
to  establish  a statistical  basis.  The  system  analyst  must  then  develop 
a fragility  curve  from  these  three  points  of  unknown  failure 
probabilities.  By  comparison,  the  probabilistic  method  results  in  a 
meaningful  failure  probability  for  each  weapon  size  and  miss  distance 
combination. 

The  deterministic  approach  can  result  in  designs  with  signifi- 
cantly different  degrees  of  conservatism,  for  example,  failure  probabilities 
corresponding  to  the  two  deterministic  designs  are  shown  in  Figure  12 
of  paragraph  11.  From  the  same  conservative  approach,  failure  probabil- 
ities of  0.02  and  0.09  resulted  for  the  designs  in  granodiorite  and  wet 
tuff,  respectively.  This  lack  of  a consistent  standard  of  comparison 
could  obviously  lead  to  incorrect  conclusions  in  a design  trade  study. 

If  a failure  probability  larger  than  those  corresponding  to  the  determin- 
istic approach  had  been  rationally  selected  as  the  specified  design  value, 
and  if  the  design  had  been  conducted  using  probabilistic  methods,  savings 
in  construction  costs  and  in  excavation  time  could  have  resulted.  However, 
if  a failure  probability  smaller  than  those  corresponding  to  the 
deterministic  approach  had  been  selected  as  the  specified  design  value, 
the  "conservative"  deterministic  designs  would  have,  in  fact,  been 
unconservative. 


The  chief  difficulties  in  the  probabilistic  method  are  the 
statistical  calculations  required  to  establish  the  means  and  coeffi- 
cients of  variation  for  the  various  strength  parameters  by  quantification 
of  uncertainties,  and  the  numerical  calculations  required  to  determine 
failure  probabilities. 


SECTION  IV 

STRUCTURAL  TESTING  APPROACH 


13.  TEST  PHILOSOPHIES  AND  TECHNIQUES 


Several  tests  may  be  appropriate  to  support  analytical 
design  studies  of  deep-buried  rock/liner  structural  systems.  These 
tests  can  be  classified  into  structural  element  tests  and  structural 
system  tests  for  determining  allowable  strength,  and  geological 
tests  for  determining  applied  free-field  stress. 

Structural  element  tests  are  performed  to  evaluate  the 
required  material  mechanical  properties.  Examples  of  this  type  of 
test  include  the  following: 

(1)  steel  tensile  coupon  tests  to  obtain  the  yield  stress 

(Oy  ) » 

(2)  concrete  unconfined  and  confined  compressive  tests  to 
obtain  strength  properties  (f'c  and  K$c)  and  elastic 
properties  (E  and  vc); 

(3)  rock  unconfined  and  confined  compressive  tests  to 
obtain  strength  properties  (c?ur  and  Ksr)  and  elastic 
properties  (E^  and  vr). 

These  properties  are  consistent  with  the  particular  assump- 
tions of  the  Newmark  method  (paragraph  8).  If  the  Mohr-Coulomb 
failure  condition  is  not  assumed  for  the  rock  and  concrete,  the 
compressive  test  data  may  be  interpreted  to  fit  a nonlinear  idealiza- 
tion. For  the  triaxial  compressive  tests,  the  confining  pressures 
should  approximate  the  design  applications.  For  all  the  structural 
element  tests,  the  applied  strain  rate  should  be  approximately  the 
same  as  that  implied  by  the  design  load  conditions.  A sufficient 
number  of  these  small  sample  tests  should  be  performed  for  a statisti- 
cal evaluation  of  the  material  properties. 
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An  important  problem  related  to  rock  mechanics  is  determining 
the  number  of  test  data  points  required  to  describe  the  properties 
of  a particular  rock  layer.  If  the  rock  layer  is  well  identified 
and  relatively  homogeneous,  an  estimate  of  required  sample  size  may 
be  obtained  from  nonparametric  sampling  theory.  According  to  Reference 
35,  the  probability  (p)  that  at  most  q x 100  percent  of  the  future 
tests  will  have  values  less  than  the  smallest  value  in  n tests  is 
given  by: 


p = 1— (l-q)n  (56) 

For  the  homogeneous  rock  layer,  q x 100  may  be  interpreted 
as  the  maximum  percentage  of  the  total  rock  volume  having  material 
properties  less  than  those  measured  in  n nominally  identical  tests 
of  samples  randomly  selected  from  the  rock  volume.  The  probability 
(p)  is  the  confidence  level.  As  a numerical  example,  if  p = 0.9  and 
q = 0.1,  the  required  number  of  tests  is  22.  No  assumptions  regarding 
the  underlying  probability  distributions  of  the  material  properties 
are  required  for  this  approach. 

The  second  class  of  tests  appropriate  to  deep-buried 
facilities  includes  tests  of  the  structural  system.  These  tests  are 
performed  primarily  to  increase  understanding  of  the  structural 
behavior  of  the  rock/liner  system.  Examples  of  this  type  of  test 
include  the  following: 

(1)  uniform  and  nonuniform  compressive  tests  of  the 
composite  steel /concrete  liner; 

(2)  structural/medium  interaction  tests  involving  both 
rock  and  composite  steel /concrete  liner. 

These  tests  may  be  either  full-scale  or  reduced-scale 
model  tests.  The  waveform  of  the  applied  stress  wave  implied  by  the 
design  load  conditions  should  be  simulated  as  accurately  as  possible 


in  the  tests.  Since  the  cost  of  this  type  of  test  would  limit  the 
number  of  samples  available,  the  concepts  of  Bayesian  statistics 
would  be  appropriate  for  the  interpretation  of  the  test  results 
(see,  for  example,  Reference  16). 

The  third  class  of  tests  includes  tests  of  the  geology  to 
evaluate  wave-transmission  characteristics  required  for  free-field 
stress  calculations.  Examples  of  this  type  of  tests  include  the 
following: 

(1)  rock  triaxial  compressive  tests  to  determine  material 
properties; 

(2)  uni-axial  dynamic  strain  ("flyer-plate")  tests  to 
determine  the  relationship  between  wave  speed  and 
free-field  stress; 

(3)  in  situ  tests  to  relate  the  actual  material  properties 
of  the  rock  volume  in  its  natural  position  to  the 
results  of  tests  performed  with  bore-hole  samples. 


A sufficient  number  of  the  triaxial  compression  and  "flyer-plate" 
tests  should  be  performed  for  a statistical  evaluation  of  the  pertin- 
ent rock  properties. 

The  analytical  design  studies  appropriate  for  deep-buried 
rock/liner  structural  systems  involve  either  the  allowable  strength 
or  the  applied  free-field  compressive  stress.  The  allowable  strength 
may  be  determined  from  finite-element  structure/media  interaction 
calculations  instead  of  by  the  Newmark  method  discussed  in  paragraph 
8.  A nonlinear  structural  analysis  computer  program,  such  as  that 
described  in  Reference  36,  provides  more  realistic  idealizations  of 
the  appropriate  stresses  and  strains  in  terms  of  the  steel,  concrete, 
and  rock  material  properties.  The  applied  free-field  stress  may  be 
calculated  between  the  weapon  impact  point  and  the  deep-buried 
facility.  The  resulting  free-field  stress  calculation  is  based  on  a 


specific  geology  rather  than  on  the  variety  of  geologies  implied  by 
the  Perret-Bass  data  (Reference  ?.6).  This  calculation,  which  would 
provide  an  accurate  free-field  stress  at  depth,  would  involve  weapon 
coupling  with  the  free  surface,  crater  effects,  and  stress  transmis- 
sion through  the  rock. 


; 
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APPLICATION  TO  EXAMPLE  HARDENED  FACILITY  ELEMENT 


The  selection  of  the  optimum  test  program  for  a deep- 
buried  rock/liner  structural  system  may  be  rationally  approached 
with  the  concepts  of  Bayesian  statistical  decision  theory  (paragraph 
3).  To  illustrate  the  rational  selection  of  a test  program,  consider 
the  following  example  based  on  the  numerical  studies  of  paragraph 
11.  A deep-buried  facility  is  to  be  constructed  at  a site  having 
granodiorite  below  a depth  of  400  meters  but  softer  rock  above  400 
meters.  The  design  probability  of  failure  has  been  specified  as  0.1 
percent.  A design  has  been  completed  with  the  Newmark  method  used 
for  allowable  strength  and  with  the  Perret-Bass  data  used  for  applied 
free-field  stress.  The  liner  has  been  optimized  for  the  granodiorite 
rock  properties.  The  softer  rock  layers  above  400  meters  are  believed 
to  attenuate  the  free-field  stress  somewhat  more  than  indicated  by 
the  Perret-Bass  data.  Design  studies  with  the  Taylor's  series 
method  indicate  that  the  uncertainty  in  applied  free-field  stress 
( PQ ' ) has  the  greatest  significance  on  the  predicted  failure  proba- 
bility. Therefore,  a reduction  in  the  coefficient  of  variation  of 
PQ',  which  is  expected  from  a free-field  stress  calculation  using 
specific  local  geological  properties,  could  result  in  significant 
construction  cost  savings.  Furthermore,  the  free-field  stress 
calculation  could  account  for  the  potentially  beneficial  effects  of 
the  softer  rock  layer  above  400  meters.  The  two  optional  actions 
are  directly  related  to  the  outcomes  of  the  following  experiments: 


deploy  the  existing  design  based  on  Pp  = 0.001  and  the 
Perret-Bass  data  or 

delay  deployment  and  redesign  the  facility  based  on 
Pp  = 0.001  and  the  results  of  a free-field  stress  cal- 
culation and  the  supporting  rock  triaxial  compression 
tests,  "flyer  plate"  tests,  and  in  situ  tests. 


The  results  of  the  tests  and  analysis  are,  of  course, 
unknown  "a  priori."  Nevertheless  reasonable  test/analysis  outcomes 
may  be  hypothesized  and  a subjective  probability  of  occurrence  may 
be  assigned  to  each  outcome.  Relative  to  the  Perret-Bass  data,  the 
mean  analytical  free-field  stress  (A0)  is  more  likely  to  decrease  than  to 
increase  because  of  the  attenuating  effects  of  the  soft  rock  layer. 

The  coefficient  of  variation  of  the  calculated  stress,  (VA),  which  is 
based  on  local  geological  properties,  is  much  more  likely  to  decrease 
than  to  remain  the  same.  Values  assigned  to  the  mean  stresses  are 
assumed  statistically  independent  of  the  values  assigned  to  the 
coefficients  of  variation.  Therefore  the  following  experimental 
outcomes  (Z^)  and  assigned  probabilities  (Pi ) are  considered  reasonable: 


Z1 

Aq  = 30  x 

10®  psi 

VA  = 0.674 

P1  = .15 

Z2 

Aq  = 30  x 

IQ®  psi 

VA  - 0.5 

P2  = .35 

Z3 

Aq  * 41.1 

x 10®  psi 

VA  = 0.674 

P3  - .09 

Z4 

Aq  = 41.1 

x 10®  psi 

VA  = 0.5 

P4  = .21 

Z5 

Aq  = 50  X 

10®  psi 

VA  = 0.674 

P5  - .06 

Z6 

Aq  = 50  X 

10®  psi 

VA  - 0.5 

P6  - .14 

Each  of  the  actions  corresponds  directly  to  one  of  the 
test/analysis  outcomes,  since  the  action  is  merely  to  redesign  the 
facility  according  to  the  particular  outcome.  The  decision  logic  is 
therefore  truncated  with  the  payoff  effectively  occurring  at  the 
test/analysis  outcomes.  The  cost  of  each  action  is  the  construction 
cost  (Equation  48)  plus,  where  applicable,  the  following  additional 
cost  of  the  stress  calculations,  the  supporting  tests,  and  the  delay 
in  deployment: 


(a)  additional  rock  samples 


$50,000 


(b)  additional  laboratory  tests 


$30,000 


(c)  in  situ  tests 


$40,000 


(d)  free-field  stress  calculations  $100,000 


(e)  delay  in  deployment  of  20  days 
(a  $10, 000/ day 


$200,000 

$420,000 


The  truncated  decision  tree  describing  this  hypothetical 
situation  is  shown  in  Figure  15.  The  expected  value  of  option  e0  is 
4.0  x 106  dollars  while  the  expected  value  of  option  e-|  is  3.36  x 10 
dollars.  Therefore,  based  on  the  postulated  experimental  outcomes  and 
assigned  probabilities,  the  decision  to  delay  deployment  and  redesign 
the  facility  is  highly  favored.  In  addition,  the  amount  by  which  the 
analysis  and  test  option  is  favored  indicates  that  considerably  more 
resources  could  be  expended  for  the  test/analysis  effort  than  was  ini- 
tially planned,  or  an  additional  delay  in  deployment  could  be  tolerated. 


1 1 

1 


3.36  x 1 O6 


4.00  x 10  « 


LOO  an 


U.=  4.00  X 10 6 


U,=  327  x 106 


/ °-35  a2  6 
zj  P-  ' ' ♦ 2^2  x 10* 


0.09  3, 


U3=  kM2  X 106 


l 


4 •»  u,=  3.32  x 106 


u,=  5.46  x 10® 


u*=  4.00  x 106 


Figure  15.  Truncated  decision  tree  for  selection  of  test  program. 


SECTION  V 
CONCLUSIONS 


The  fundamental  conclusion  of  the  present  study  is  that  the 
methodology  is  now  available  to  use  probabilistic  concepts  as  the  basis 
for  cost-effective  design  of  hardened  facilities.  A probabilistic 
structural  design  approach  was  demonstrated  for  the  relatively  simple 
case  of  a composite  liner  for  a deep-buried  tunnel.  More  generally, 
however,  probabilistic  conceptsmay  be  used  with  any  deterministic  design 
procedure  to  account  for  the  recognized  uncertainties  in  a rational 
and  consistent  manner.  This  use  of  probabilistic  concepts  permits  a 
structural  design  with  an  explicit  and  reasonable  balance  between 
reliability  and  cost.  Deterministic  structural  design  procedures, 
used  without  probabilistic  concepts,  produce  designs  whose  safety  is 
neither  balanced  nor  clearly  specified  (Reference  1).  In  addition, 
just  as  any  probabilistic  design  approach  is  merely  a logical  extension 
of  a deterministic  design  approach,  so  the  data  base  required  for  a 
probabilistic  design  need  not  be  significantly  different  from  that 
required  for  the  corresponding  deterministic  design.  The  probabilistic 
approach  provides  a rational  framework  for  incorporating  available 
data  in  the  design  process;  it  does  not  necessarily  require  a greater 
quantity  of  data  than  is  required  for  the  standard  deterministic 
approach  with  sensitivity  or  parameter-variation  studies. 

The  methodology  used  for  the  deep-buried  tunnel  design 
example  accounts  for  multiple  failure  modes  when  the  applied  loads 
result  from  a single  source  such  as  a nuclear  event.  Although  both 
loads  and  strengths  are  required  to  follow  either  the  lognormal  or 
the  normal  probability  law  and  the  strengths  are  required  to  be 
independent,  this  basic  approach  is  believed  to  have  wide  applicability 
in  the  structural  design  of  hardened  facilities. 

Basic  concepts  of  Bayesian  statistical  decision  theory  are 
presented  along  with  two  practical  examples.  The  first  example 
(paragraph  4)  results  in  a method  for  rationally  selecting  an 
acceptable  failure  probability  for  hardened  facilities.  The  second 
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example  (paragraph  14)  involves  the  use  of  decision  theory  in  defining 
structural  test  programs.  Bayesian  statistical  decision  theory  is  a 
powerful  tool  to  balance  risk  against  cost  for  decision-making  under 
uncertainty. 

The  existing  data  base  (paragraph  9)  was  adequate  to 
provide  realistic  numerical  values  for  use  in  the  example  design. 

The  applied  load  (P0‘)  data  and  the  geometrical  and  material  property 
data  and  the  failure  strain  data  for  allowable  strength  (P  ) are 
typical  of  currently  available  values. 


SECTION  VI 
RECOMMENDATIONS 


Future  research  areas  with  general  applicability  to  hardened 
facilities  include  the  following: 

1.  Develop  and  demonstrate  detailed  procedures  for  applying 
the  minimum  expected  cost  hypothesis  to  determine  acceptable 
failure  probabilities  of  hardened  facilities.  This  involves 
defining  specific  failure  conditions  for  hypothetical 
hardened  facilities,  preparing  and  distributing  appropriate 
questionnaires  to  members  of  the  defense  agencies,  and 
interpreting  the  results. 

2.  Apply  statistical  decision  theory  to  specific  decisions 
affecting  the  actual  design  and  test  of  hardened  facilities. 
Application  to  an  existing  design  or  test  is  necessary  for 
the  purpose  of  demonstrating  the  advantages  and/or 
disadvantages  of  the  method  when  compared  to  existing 
design  and  test  procedures. 

3.  Extend  the  probabilistic  structural  design  approach  by  a 
general  incorporation  of  finite-element  analytical 
techniques. 

The  study  of  deep-buried  lined  tunnels  in  this  report  suggests  the 
following  areas  of  future  research  in  the  design  of  rock/liner  systems. 

1.  Develop  and  demonstrate  methodology  for  minimizing  total 
cost  subject  to  a specified  failure  probability  for  a 
given  site  using  the  existing  design  equations  based  on 
Newmark's  method.  Design  variables  to  be  included  in  the 
optimization  procedure  are  depth  of  burial,  dimensions 
of  the  steel /concrete  composite  liner,  and  concrete 
strength. 


3. 


Develop  probabilistic  design  equations,  for  the  rock/liner 
structural  system,  which  are  not  limited  by  the  assumption 
of  radial  symmetry.  This  involves  incorporating  the 
effects  of  local  variations  in  applied  load  and  in  rock 
strength  around  the  perimeter  of  the  tunnel  as  in  Reference 
29. 

Develop  and  demonstrate  methodology  for  applying  finite- 
element  techniques  to  the  probabilistic  design  of  rock/liner 
systems.  In  particular,  application  of  the  NONSAP  code 
(Reference  36)  will  be  studied. 
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APPENDIX  A 

DESIGN  EQUATIONS  BASED  ON 
NEWARK'S  METHOD 


A. 1 NEWMARK'S  EQUATION 

The  free-field  compressive  stress,  expressed  in  terms  of 
geometric  and  material  properties  of  the  rock/liner  structural 
system,  is  determined  as  follows  from  Newmark's  method  when  the 
elastic/plastic  interface  is  in  the  rock: 


ER*e„  - NR«(j  „ for  the  rock  failure  condition 


where  S 


for  the  concrete/steel  failure  condition,  and 


The  critical  stresses  and  strains  used  in  the  Newmark 
formulation  are  as  follows: 


radial  stress  at  concrete/steel  interface  applied  by 
steel  to  concrete, 

circumferential  strain  at  concrete/steel  interface  for 
concrete/steel  failure  condition, 
radial  stress  at  rock/concrete  interface  applied  by 
concrete  to  rock,  and 

circumferential  strain  at  rock/concrete  interface  for 
rock  failure  condition. 
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The  basic  parameters  normally  used  with  Newmark's  method 
are  defined  as  follows: 
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rock  unconfined  compressive  strength  (psi) 
dimensionless  friction-dependent  constant  for  rock 
rock  equivalent  elastic  modulus  (psi) 
dimensionless  Poisson's  ratio  for  rock 
radial  distance  to  rock/concrete  interface  (inches) 
concrete  unconfined  compressive  strength  (psi) 
dimensionless  friction-dependent  constant  for  concrete 
concrete  equivalent  elastic  modulus  (psi) 
dimensionless  Poisson's  ratio  for  concrete 
radial  distance  to  concrete/steel  interface  (inches) 
yield  stress  of  steel  liner  (psi) 
thickness  of  steel  liner  (inches) 


A. 2 PARTIAL  DERIVATIVES  OF  NEWARK'S  EQUATION  FOR  THE  ROCK  FAILURE 
MODE 


The  free-field  compressive  stress  (PQ)  defined  by  Equations 
(A-l),  (A-2),  and  (A-4)  is  the  allowable  strength  corresponding  to 
the  rock  failure  strain  Ur).  For  the  probabilistic  design  study,  the 
Taylor's  series  method  is  used  to  obtain  approximate  values  for  the 
mean  and  variance  of  P . The  mean  of  PQ  is,  according  to  Equation 
(17)  of  paragraph  2,  approximately  equal  to  the  expression  for  PQ 
evaluated  at  the  mean  values  of  all  individual  variables  and 
parameters.  The  variance  of  PQ  is,  according  to  Equation  (18), 
approximated  by  summing  the  products  of  the  squared  partial  derivatives 
(evaluated  at  the  individual  mean  values)  times  the  individual  variances 
Partial  derivatives  of  PQ  were  determined  with  respect  to  the  following 
variables  and  parameters:  Ksr,  our,  ER,  «r>  NR,  and  arc.  For 
convenience  in  the  probabilistic  design  study,  these  six  quantities 
were  considered  statistically  independent.  The  partial  derivatives 
are  as  follows: 


A.  3 PARTIAL  DERIVATIVES  OF  NEWMARK'S  EQUATION  FOR  THE  CONCRETE/STEEL 
FAILURE  MODE 

The  free-field  compressive  stress  (P  ) defined  by  Equations 
(A-l),  (A-3),  and  (A-4)  is  the  allowable  strength  corresponding  to 
the  concrete/steel  failure  strain  (ec).  The  variance  of  PQ  is 
approximated  by  the  Taylor's  series  method  (Equation  18  of  paragraph 
2)  in  terms  of  the  following  variables  and  parameters:  Ksr>  our, 

ER,  NR,  o , EC,  f . NC,  o„,,  and  RCA.  The  partial  derivatives 

of  PQ  taken  with  respect  to  these  10  quantities  (which  for  convenience 

are  considered  statistically  independent)  are  as  follows: 
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APPENDIX  B 

COMPUTER  PROGRAM  FOR  RELIABILITY 
OF  DEEP-BURIED  LINED  TUNNtL 


B.l  GENERAL 

The  computer  program  used  for  the  probabilistic  design  study 
is  described  herein.  Following  a general  description  of  the  program  and 
a definition  of  the  required  input  data,  are  a complete  program  listing 
and  printout  for  a sample  problem.  The  computer  program  is  written  in 
FORTRAN  IV  for  the  CDC  6600. 


B.2  PROGRAM  DESCRIPTION 

This  program  calculates  the  probability  of  failure  and  the 
initial  cost  of  a deep-buried  tunnel  having  a composite  steel /concrete 
liner.  Newmark’s  method  (described  in  paragraph  8 and  Appendix  A)  is  used 
to  relate  material  stresses  and  strains  to  applied  free-fie1d  pressc'-*-’ 
Failure  of  the  rock/liner  system  is  assumed  to  occur  when  circumferential 
strains  exceed  allowable  values.  Three  optional  descriptions  of  failure 
are  available  to  the  user  as  follows: 


Option  0 - failure  of  rock  at  rock/concrete  interface  is  single 
failure  mode 

Option  1 - failure  of  steel /concrete  liner  is  single  failure  mode 
Option  2 - failure  of  either  rock  or  steel /concrete  liner  are  possible 
independent  failure  modes. 


' * 


B. 3 PROGRAM  INPUT,  PROGRAM  LISTING,  AND  SAMPLE  PRINTOUT 
PROGRAM  CONTROL 


OPTION  Option  0 (rock  failure  mode),  option  1 (steel/concrete  liner 
failure  mode),  option  2 (2  failure  modes) 

ND  Number  of  depths 

DFL  Ratio  of  Minimum  Depth/Mean  Depth,  D 

DFH  Ratio  of  Maximum  Depth/Mean  Depth,  D 


INITIAL  COST  FUNCTION  DATA  (Cl) 
R Length  of  Tunnel  (m) 


MM 

BB 

C 

E 

F 

G 

HH 


Vertical  Excavation  Cost  Data 

Venting  Cost  Data 

Horizontal  Excavation  Cost  Data 


Steel  Liner  Cost  Data 
Concrete  Liner  Cost  Data 


APPLIED  LOAD  DATA  - PQ  Free  Field  Compressive  Stress  (mean  and  coefficient  of 


variation) 

JQ  V^  Rock  Transmissibility  (PQ  coefficient) 

Weapon  Effectiveness  or  Coupling  Factor;  dimensionless 


Vk» 


Ws  ^Ws  ^eaPon  (KT)  at  the  surface 


D Vr 


L V, 


a 

8 


Depth  of  Facility  (meters) 
Lateral  Range  (meters) 
Exponent  for  Weapon  Yield 
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Rock  unconfirmed  compressive  stress  (psi) 
Friction-dependent  constant  (dimensionless) 
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CONCRETE  STRENGTH  PARAMETERS  (Lognormal) 


Failure  strain  in  concrete  at  steel /concrete  interface 


(dimensionless) 

Coefficient  of  Uncertainty  for  Concrete  Strain 


ROCK  STRENGTH  PARAMETERS  (Lognormal) 


Failure  strain  in  rock  at  rock/concrete  interface 


(dimensionless) 

Coefficient  of  Uncertainty  for  Rock  Strain 
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ATTN-  M.  Patel 


Department  of  the  Interior 
Bureau  of  Mines 

ATTN:  Technical  Library 


California  Institute  of  Technology 
ATTN:  T.  Ahrens 


Department  of  the  Interior 
U.S.  Geological  Survey 
ATTN:  D.  Roddy 


California  Research  & Technology,  Inc 
ATTN:  S.  Shuster 
ATTN:  Library 
ATTN:  K.  Kreyenhagen 


NASA 

Ames  Research  Center 

ATTN:  R.  Jackson 


Cal  span,  Corporation 
ATTN:  Library 

Center  for  Planning  & Rsch.,  Inc 
ATTN:  R.  Shnider 


Office  of  Nuclear  Reactor  Regulation 
Nuclear  Regulatory  Commission 
ATTN:  L.  Shao 
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ATTN:  R.  Crawford 


Aerospace  Corporation 
ATTN:  P.  Mathur 
ATTN:  L.  Selzer 

2 cy  ATTN:  Technical  Information  Services 


University  of  Dayton 
Industrial  Security  Super  KL-505 
ATTN:  H.  Swift 


Agbabian  Associates 
ATTN:  C.  Bagge 
ATTN:  M.  Agbabian 


University  of  Denver 
Colorado  Seminary 

ATTN:  J.  Wisotski 


Analytic  Services,  Inc. 

ATTN:  G.  Hesselbacher 
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Kaman  AviDyne 

Division  of  Kaman  Sciences  Corp 
ATTN:  library 
ATTN:  E.  Criscione 
ATTN:  N.  Hobbs 
ATTN:  G.  Zartarlan 


EG&G  Washington  Analytical  Services  Center,  Inc 
ATTN:  Library 
ATTN:  Director 


Electric  Power  Research  Institute 
ATTN:  G.  Sliter 


Kaman  Sciences  Corp. 
ATTN:  Library 
ATTN:  D.  Sachs 
ATTN:  F.  Shelton 


Electromechanical  Sys.  of  New  Mexico,  Inc 
ATTN:  R.  Shunk 


Eric  H.  Wang 

Civil  Engineering  Rsch.  Fac 
ATTN:  L.  Bickle 
ATTN:  N.  Baum 


Karagozian  and  Case 

ATTN:  J,  Karagozian 

Lockheed  Missiles  & Space  Co.,  Inc 
ATTN:  TIC-Library 

Lockheed  Missiles  & Space  Co.,  Inc 
ATTN:  T.  Geers 
ATTN:  B.  Almroth 


Franklin  Institute 
ATTN:  Z.  Zudans 


Gard,  Inc. 

ATTN:  G.  Neidhardt 


General  Dynamics  Corp. 
Pomona  Division 

ATTN:  K.  Anderson 


Martin  Marietta  Corporation 
Orlando  Division 

ATTN:  G.  Fotieo 
ATTN:  A.  Cowan 


General  Dynamics  Corp. 
Electric  Boat  Division 
ATTN:  M.  Pakstys 


University  of  Massachusetts 
ATTN:  W.  Nash 


General  Electric  Co. 
Space  Division 

ATTN:  M.  Bortner 


McDonnell  Douglas  Corp. 
ATTN:  R.  Halprin 


McMillan  Science  Associates,  Inc 
ATTN:  W.  McMillian 


General  Electric  Co. 

Re-Entry  & Environmental  Systems  Div 
ATTN:  A.  Ross 


Merritt  CASES,  Inc. 

ATTN:  J.  Merritt 
ATTN:  Library 


General  Electric  Co. -TEMPO 
Center  for  Advanced  Studies 
ATTN:  OASIAC 


Meteorology  Research,  Inc 
ATTN:  W.  Green 


General  Research  Corp. 
Santa  Barbara  Division 
ATTN:  B.  Alexander 


Mitre  Corp. 

ATTN:  Director 


Geocenters,  Inc. 
ATTN:  E.  Marram 


University  of  New  Mexico 
Dept,  of  Campus  Security  & Police 
ATTN:  G.  Triandafalidis 


H-Tech  Labs.,  Inc. 

ATTN:  B.  Hartenbaum 


University  of  New  Mexico 
Civil  Engineering  Rsch.  Facility 
ATTN:  N.  Baum 
ATTN:  D.  Calhoun 


Honeywell,  Inc. 

Defense  Systems  Division 
ATTN:  T.  Helvig 


Nathan  M.  Newmark 
Consulting  Services 
ATTN:  W.  Hall 
ATTN:  N.  Newnark 


I IT  Research  Institute 
ATTN:  R.  Welch 
ATTN:  Documents  Library 


University  of  Illinois 
ATTN:  A.  Ang 


University  of  Oklahoma 
Research  Institute 

ATTN:  J.  Thompson 

Pacifica  Technology 
ATTN:  R.  Allen 
ATTN:  R.  Bjork 
ATTN:  G.  Kent 


Institute  for  Defense  Analyses 
ATTN:  Classified  Library 
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J.  H.  Wiggins,  Co. , Inc 
ATTN:  J.  Collins 
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University  of  Pittsburgh 
School  of  Engineering 

ATTN:  M.  Williams,  Jr. 


Texas  A&M  University  System 
c/o  Texas  A&M  Research  foundation 
ATTN:  H.  Coyle 


Prototype  Development  Associates,  Inc. 

TRW  Defense  & Space  Sys.  Group 

ATTN 

T.  McKinley 
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ATTN:  A.  Feldman 
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W.  Wright,  Jr. 
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Technical  Information  Center 
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ATTN 
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Weidlinger  Assoc. 

Consulting  Engineers 
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ATTN:  M.  Baron 

ATTN 

Technical  Library 
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Science  Applications,  Inc. 

Weidlinger  Assoc. 

ATTN 
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Consulting  Engineers 
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Science  Applications,  Inc. 
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ATTN 
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Sc  ence  Applications,  Inc. 


ATTN 
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B.  Chambers,  III 
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ATTN:  W.  Volz 
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T. 
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T. 
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ATTN: 

D. 
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